A zero-day flaw allows to run arbitrary commands on macOS systems

guest · Sep 21, 2021

A zero-day flaw allows to run arbitrary commands on macOS systems
Security researchers disclosed a new zero-day flaw in Apple’s macOS Finder
September 21, 2021
https://securityaffairs.co/wordpress/122447/hacking/zero-day-macos.html

Independent security researcher Park Minchan disclosed a zero-day vulnerability in Apple’s macOS Finder that can be exploited by attackers to run arbitrary commands on Mac systems running any macOS version.

The flaw is due to the way macOS handles inetloc files that causes it to run commands embedded inside. According to the SSD Secure Disclosure advisory, the commands it runs can be local to the macOS allowing the execution of arbitrary commands by the user without any prompts.
Click to expand...

“A vulnerability in the way macOS processes inetloc files causes it to run commands embedded inside, the commands it runs can be local to the macOS allowing the execution of arbitrary commands by the user without any warning / prompts.” reads the SSD Secure Disclosure advisory. “Newer versions of macOS (from Big Sur) have blocked the file:// prefix (in the com.apple.generic-internet-location) however they did a case matching causing File:// or fIle:// to bypass the check.”

According to BleepingComputer, at the time of this writing, the PoC code has a detection rate of zero VirusTotal.
Click to expand...

Log in or Sign up

A zero-day flaw allows to run arbitrary commands on macOS systems

guest Guest

Log in or Sign up

A zero-day flaw allows to run arbitrary commands on macOS systems

guest Guest

Useful Searches