CVE-2012-4284

CVE-2012-4284 describes a privilege-escalation vulnerability in Viscosity 1.4.1 for Mac OS X. The issue stems from a path-name validation flaw in the setuid-root ViscosityHelper binary, which could let a remote attacker cause arbitrary code execution with root privileges. Documents identify Visco...

CVE-2017-20123

The CVE-2017-20123 entry concerns Sparklabs Viscosity 1.6.7. The vulnerability affects the DLL Handler component and enables an untrusted search path condition. It is described as exploitable remotely, with public disclosure of the exploit. A fix is available in version 1.6.8. Severity varies by ...

CVE-2020-5180

CVE-2020-5180 affects Viscosity 1.8.2 on Windows and macOS. An unprivileged user can set a subset of OpenVPN parameters, enabling loading of a malicious library into the memory of the OpenVPN process and causing limited local privilege escalation. When a VPN connection starts with a TLS/SSL clien...