CVE-2012-4677

CVE-2012-4677 affects Tunnelblick 3.3beta20 and earlier. The issue arises when a crafted Info.plist controls the gOkIfNotSecure value, enabling local users to gain privileges via this condition. Affected component is the Info.plist handling in Tunnelblick, with a local-auth attack vector and part...