PT-2019-13080

Name of the Vulnerable Software and Affected Versions Little Snitch versions prior to 4.4.1 Description A vulnerability exists in a privileged helper tool of Little Snitch. Although version 4.4.0 fixes the vulnerability, the operating system may retain a copy of the privileged helper, which is no...

CVE-2019-12174

hide.me before 2.4.4 on macOS suffers from a privilege escalation vulnerability in the connectWithExecutablePath:configFilePath:configFileName method of the mehidevpnhelper.Helper class in the me.hide.vpnhelper macOS privilege helper tool. This method takes user-supplied input and can be used to...

0 day: a detailed analysis of the macOS platform Shimo VPN Multiple privilege elevation vulnerability-vulnerability warning-the black bar safety net

One, overview The Cisco Talos team recently disclosed Shimo VPN help tool Helper Tool a series of holes. Shimo VPN is the macOS platform a very popular VPN client that can in one application to connect multiple VPN accounts. These particular vulnerabilities were in the help tool, this is the Shim...

Vulnerability Spotlight: Multiple vulnerabilities in Shimo VPN's helper tool

Discovered by Tyler Bohan of Cisco Talos. Overview Cisco Talos is disclosing a series of vulnerabilities found in the Shimo VPN Helper Tool. Shimo VPN is a popular VPN client for MacOS that can be used to connect multiple VPN accounts to one application. These specific vulnerabilities were found ...

Shimo VPN helper tool configureRoutingWithCommand privilege escalation vulnerability

Summary An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the configureRoutingWithCommand function. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a...

CVE-2018-4052

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

CVE-2018-4053

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable...

Information disclosure

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

PT-2019-10782

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local information leak issue exists in the privileged helper tool, allowing an attacker to pass a PID and receive information that would usually be accessible only to the root user. Recommendatio...

CVE-2018-4052: Exposure of Sensitive Information to an Unauthorized Actor

An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user...

CVE-2018-4051: Incorrect Permission Assignment for Critical Resource

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories...

PT-2019-10781

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local privilege escalation issue exists in the privileged helper tool, allowing an attacker to create directories and subdirectories globally on the root file system and modify permissions of...

CVE-2018-4050: Incorrect Permission Assignment for Critical Resource

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally adjust folder permissions leading to execution of arbitrary code with elevated privileges...

PT-2019-10780

Name of the Vulnerable Software and Affected Versions GOG Galaxy's Games version 1.2.47 Description A local privilege escalation issue exists in the privileged helper tool, allowing an attacker to adjust folder permissions globally. This can lead to the execution of arbitrary code with elevated...

GOG Galaxy Games fillProcessInformationForPids information leak vulnerability

Summary An exploitable local information leak vulnerability exists in the privileged helper tool of GOG Galaxy’s Games, version 1.2.47 for macOS. An attacker can pass a PID and receive information running on it that would usually only be accessible to the root user. Tested Versions Gog Galaxy...

CVE-2018-4054

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine to successfully...

CVE-2018-4055

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successful...

PT-2019-10785

Name of the Vulnerable Software and Affected Versions Pixar Renderman version 22.2.0 Description A local privilege escalation issue exists in the install helper tool of the Mac OS X version of the software. This allows a user with local access to read any root file from the file system. An attack...

PT-2019-10784

Name of the Vulnerable Software and Affected Versions Pixar Renderman version 22.2.0 Description A local privilege escalation issue exists in the install helper tool of the Mac OS X version of the software. This allows a user with local access to escalate their privileges to root. An attacker wou...

CVE-2018-4055: Improper Input Validation

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successful...