CVE-2018-4042

CVE-2018-4042 affects CleanMyMac X 4.04. The vulnerability is in the helper service’s removeLaunchdAgentAtPath function, where there is no validation of the calling application, allowing a local attacker to run as root and modify/delete root-owned files. The advisory notes this is addressed by up...