关联漏洞
标题：
多款 Apple 产品授权问题漏洞
(CVE-2020-9922)
描述：Apple macOS Mojave等都是美国苹果（Apple）公司的一套专为Mac计算机所开发的专用操作系统。 多款 Apple 版本存在安全漏洞，该漏洞源于处理恶意的电子邮件可能导致写入任意文件。以下产品及版本受到影响：Apple macOS Mojave,Apple macOS High Sierra,Apple macOS Catalina
介绍
# Fix-Apple-Mail-CVE-2020-9922
Apple Mail has a scary zero-click vulnerability. Versions of OS X prior to High Sierra were not patched. https://mikko-kenttala.medium.com/zero-click-vulnerability-in-apples-macos-mail-59e0c14b106c
I made this quickly and only tested it on Mavericks. I don't see any reason for it to _not_ work on other OS's, but that definitely does not mean that it will!
If you use this, feel free to open issues to tell me how it is or isn't working, because that's always cool to hear! However, I am unlikely to actually fix anything unless you're running OS X 10.9, because Mavericks is special! <3
Download from https://jonathanalland.com/old-osx-projects.html
文件快照
[4.0K] /data/pocs/523caeeb8f9f4bc3191297956ab8d20d65a2da03
├── [4.0K] MailSecFix
│ ├── [ 932] Info.plist
│ └── [4.0K] ZKSwizzle
│ ├── [7.1K] ZKSwizzle.h
│ └── [ 11K] ZKSwizzle.m
├── [4.0K] MailSecFix.xcodeproj
│ ├── [9.3K] project.pbxproj
│ ├── [4.0K] project.xcworkspace
│ │ ├── [ 155] contents.xcworkspacedata
│ │ └── [4.0K] xcuserdata
│ │ └── [4.0K] jonathan.xcuserdatad
│ │ └── [ 18K] UserInterfaceState.xcuserstate
│ └── [4.0K] xcuserdata
│ └── [4.0K] jonathan.xcuserdatad
│ └── [4.0K] xcschemes
│ ├── [2.7K] MailSecFix.xcscheme
│ └── [ 482] xcschememanagement.plist
├── [ 650] main.m
└── [ 687] README.md
9 directories, 10 files
备注
1. 建议优先通过来源进行访问。
2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。