CVE-2017-8665

Xamarin.iOS Elevation Of Privilege Vulnerability

CVE-2017-8665 is fixed in Xamarin.iOS on 1 platform by KB4037359 (version ), released August 14, 2017. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
n/a
Important
Exploitation
None reported
Exploitation Unlikely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0435
91st percentile

<p>An elevation of privilege vulnerability exists when the Xamarin.iOS update component improperly handles directories and binaries.</p> <p>An attacker who successfully exploited this vulnerability could run arbitrary code as root. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Only systems running macOS are affected by this vulnerability.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and create a folder at a particular location. which could be used by another process running with elevated privileges.</p> <p>The security update addresses the vulnerability by correcting how the Xamarin.iOS update component handles directories and binaries.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Xamarin.iOS KB4037359 Aug 14, 2017