Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

pwn4fun Spring 2014 - Safari - Part II

projectzero.google | blog | #sandbox-escape | #kernel-exploitation | #project-zero | #safari | #osx | #pwn4fun

Summary

Part two of a Google Project Zero pwn4fun series, detailing how a Safari compromise escalated from the renderer sandbox to full system access on OS X.
Published
Collected

original ↗

Related coverage

blog · projectzero.google
pwn4fun Spring 2014 - Safari - Part I
Part one of a Google Project Zero pwn4fun series, detailing how a bug in Safari's JavaScriptCore engine yielded code execution inside the renderer sandbox.
blog · projectzero.google
An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit
A step-by-step analysis of an in-the-wild iOS exploit that escapes Safari's WebContent process into the GPU process, covering the underlying bug and exploitation strategy.
blog · projectzero.google
In-Console-Able
A Google Project Zero post describing a Windows security bug that weakens sandbox-style restrictions and could aid sandbox escape research.
blog · projectzero.google
More Mac OS X and iPhone sandbox escapes and kernel bugs
A Google Project Zero rundown of sandbox escape and privilege escalation bugs in Mac OS X and iOS fixed by Apple in OS X 10.9.5 and iOS 8.
blog · projectzero.google
Mac OS X and iPhone sandbox escapes
A Google Project Zero publication of details on Mac OS X and iPhone sandbox escape bugs after Apple shipped fixes.
research · projectzero.google
Exploiting NVMAP to escape the Chrome sandbox - CVE-2014-5332
A Google Project Zero post exploiting a bug in NVIDIA's NVMAP driver (CVE-2014-5332) to escape the Chrome for Android sandbox.
back