CVE-2017-2675

2017-04-0615:00:00

obdev

www.cve.org

EPSS

Percentile

5.1%

JSON

Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file “at.obdev.littlesnitchd.plist” which gets installed to /Library/LaunchDaemons.

CNA Affected

[
  {
    "product": "Little Snitch",
    "vendor": "Objective Development Software GmbH",
    "versions": [
      {
        "status": "affected",
        "version": "3.0 - 3.7.3"
      }
    ]
  }
]

References

twitter.com/patrickwardle/status/849076615170711552

www.obdev.at/products/littlesnitch/releasenotes.html

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2017-2675