NetSight
low2.1Public exploit code

CVE-2011-0180

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRA…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary (1) HFS, (2) HFS+, or (3) HFS+J files via a crafted F_READBOOTSTRAP ioctl call.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.6.6
Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4
AppleMac Os X Server
through 10.6.6
Versions 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4

Weakness classification

References