True Image 2021 - LPE via XPC service communication
该报告还没有中文解读。
原文摘录
摘自原文（4070 字符中的一小部分）
Summary This is a follow up of #908152. The bug reported there wasn't fixed properly, and as you don't see it, I consider this as new. In the good faith that you will not close this as duplicate submitting this. Also hoping for a bit more bounty than the 200$... The privilege helper tool only …
原文中的代码
#import <Foundation/Foundation.h> static NSString* XPCHelperMachServiceName = @"com.acronis.trueimagehelper"; @protocol HelperToolProtocol - (void)checkFullDiskAccessWithReply:(void (^)(BOOL))arg1; - (void)executeProcess:(NSString *)arg1 arguments:(NSArray *)arg2 environment:(NSDictionary *)arg3 …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 Acronis 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @theevilbit · 版权归作者与 Acronis 所有