CVE-2018-4050

HIGH

7.8

Description

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges.

Details CVE

Score CVSS v3.17.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie4/1/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

gog:galaxy

Faiblesses (CWE)

CWE-732

References

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0724(talos-cna@cisco.com)

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0724(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.