>> ARCHIVE: 2014-04

Depot WiFi version 1.0.0 for iOS suffers from code execution and local file inclusion vulnerabilities.

This exploit leverage a stack overflow vulnerability to escalate privileges. The vulnerable function nfs_convert_old_nfs_args does not verify the size of a user-provided argument before copying it to the stack. As…