cve/2014/CVE-2014-8611.md

CVE-2014-8611

Description

The __sflush function in fflush.c in stdio in libc in FreeBSD 10.1 and the kernel in Apple iOS before 9 mishandles failures of the write system call, which allows context-dependent attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted application.

POC

Reference

No PoCs from references.

Github

• https://github.com/RoundofThree/poc