CVE-2017-8665

Описание

An elevation of privilege vulnerability exists when the Xamarin.iOS update component improperly handles directories and binaries.

An attacker who successfully exploited this vulnerability could run arbitrary code as root. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Only systems running macOS are affected by this vulnerability.

To exploit this vulnerability, an attacker would have to log on to an affected system and create a folder at a particular location. which could be used by another process running with elevated privileges.

The security update addresses the vulnerability by correcting how the Xamarin.iOS update component handles directories and binaries.