CVE-2017-16928

The arqupdater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip...

CVE-2017-16928

The CVE refers to Arq (Mac) 5.10 and earlier, where the arq_updater binary enables a local user to write arbitrary files and gain root privileges via a crafted update URL (example: file:///tmp/blah/Arq.zip). The issue is rooted in the arq_updater component on macOS; exploitation requires local ac...