CVE-2017-7690

CVE-2017-7690 affects Proxifier for Mac prior to 2.19.2. On first run, if the KLoader binary is not suid root, Proxifier.app runs it as root, enabling the KLoader to gain/maintain root privileges once it sets itself to suid. The KLoader directory not being root-owned lets an attacker replace it w...