Xamarin.iOS Elevation Of Privilege Vulnerability
CVE-2017-8665 is fixed in Xamarin.iOS on 1 platform by KB4037359 (version ), released August 14, 2017. It is not reported as exploited. Patch Radar priority: High.
<p>An elevation of privilege vulnerability exists when the Xamarin.iOS update component improperly handles directories and binaries.</p> <p>An attacker who successfully exploited this vulnerability could run arbitrary code as root. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Only systems running macOS are affected by this vulnerability.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and create a folder at a particular location. which could be used by another process running with elevated privileges.</p> <p>The security update addresses the vulnerability by correcting how the Xamarin.iOS update component handles directories and binaries.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Xamarin.iOS | KB4037359 | Aug 14, 2017 | |