Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Remote iPhone Exploitation Part 1: Poking Memory via iMessage and CVE-2019-8641

projectzero.google | vulnerability | CVE-2019-8641 | #rce | #iphone | #exploit-development | #project-zero | #imessage

Summary

The first part of the series provides an in-depth discussion of the vulnerability, the second part presents a technique to remotely break ASLR, and the third part explains how to gain remote code execution afterwards.
CVE
CVE-2019-8641
Published
Collected

original ↗

Related coverage

blog · projectzero.google
Remote iPhone Exploitation Part 2: Bringing Light into the Darkness -- a Remote ASLR Bypass
The initial primitive gained from the vulnerability is an absolute address dereference in which the read value is afterwards used as an ObjC object. As such, some knowledge of the target address space is required in order to exploit this vulnerability for remote code execution. This blog post describes a way to defeat ASLR remotely without any additional information disclosure vulnerabilities.
blog · projectzero.google
Over The Air - Vol. 2, Pt. 3: Exploiting The Wi-Fi Stack on Apple Devices
The final part of Project Zero's Over The Air series, completing a remote kernel code execution chain on the iPhone 7 using Wi-Fi communication alone.
blog · projectzero.google
Taming the wild copy: Parallel Thread Corruption
A Google Project Zero post on a 'wild copy' parallel thread memory corruption bug and its exploitation.
research · projectzero.google
Finding and exploiting ntpd vulnerabilities
A Google Project Zero guest post telling how one of the researchers found and exploited vulnerabilities in the ntpd network time server.
blog · projectzero.google
Mac OS X and iPhone sandbox escapes
A Google Project Zero publication of details on Mac OS X and iPhone sandbox escape bugs after Apple shipped fixes.
vulnerability · projectzero.google
Multiple Internet to Baseband Remote Code Execution Vulnerabilities in Exynos Modems
Disclosure of multiple internet-to-baseband remote code execution vulnerabilities affecting Samsung Exynos modems, detailing the flaws, affected devices, and patch availability.
back