CVE-2014-4677

CVE-2014-4677 affects Libmacgpg in GPG Suite prior to 2015.06. The installPackage function of the installerHelper subcomponent allows a local user to execute arbitrary commands with root privileges by injecting shell metacharacters in the xmlPath argument. This is a local-privilege escalation vul...