POC详情： cb7f4ea49ebef532096e2fddd8577675547ebff3

来源
https://github.com/bazad/IOFireWireFamily-null-deref
关联漏洞
标题： Apple macOS Sierra IOFireWireFamily 安全漏洞 (CVE-2017-2388)
描述：Apple macOS Sierra是美国苹果（Apple）公司为Mac计算机所开发的一套专用操作系统。IOFireWireFamily是其中的一个用于识别输入输出设备的组件。 Apple macOS Sierra 10.12.4之前的版本中的IOFireWireFamily组件存在安全漏洞。攻击者可借助特制的应用程序利用该漏洞造成拒绝服务（空指针逆向引用）。
描述
CVE-2017-2388: Null-pointer dereference in IOFireWireFamily.
介绍
## IOFireWireFamily-null-deref

IOFireWireFamily-null-deref is a proof-of-concept exploit for CVE-2017-2388, a NULL pointer
derefererence in `IOFireWireUserClient` that was fixed in [macOS Sierra 10.12.4]. This
vulnerability can be triggered to cause denial of service on devices with a FireWire port.

[macOS Sierra 10.12.4]: https://support.apple.com/en-us/HT207615

### CVE-2017-2388

The function `IOFireWireUserClient::setAsyncRef_IsochChannelForceStop` did not check that the
parameter `inAsyncRef` is non-NULL before calling `bcopy` with `inAsyncRef` as the source.

### License

The IOFireWireFamily-null-deref code is released into the public domain. As a courtesy I ask that
if you reference or use any of this code you attribute it to me.
文件快照

 [4.0K]  /data/pocs/cb7f4ea49ebef532096e2fddd8577675547ebff3
├── [1.1K]  IOFireWireFamily-null-deref.c
├── [ 215]  Makefile
└── [ 750]  README.md

0 directories, 3 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。