2016年iOS公开可利用漏洞总结_EN1

Summary of Critical and Exploitable iOS Vulnerabilities in 2016

Author：Min (Spark) Zheng, Cererdlong, Eakerqiu @ Team OverSky

0x00 Introduction

iOS security is far more fragile than you believe. And there are lots of critical and exploitable iOS

vulnerabilities in the wild. We summarized these critical iOS vulnerabilities which can be used for

remote code execution or jailbreaking in this report. Hopefully, it can bring some help for your

mobile security research.

0x01 iOS 10.1.1 Critical and Exploitable Vulnerabilities

1. Mach_portal exploit chain: The exploit chain was published by Ian Beer of Google Project Zero.

“com.apple.iohideventsystem” with a send right to a port which belongs to the attacker. The

attacker also holds the receive right of that port. Then the attacker uses CVE-2016-7661 to crash