PT-2019-8746
CVE-2018-10171
·
تاريخ النشر
2019-06-05
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Kromtech MacKeeper version 3.20.4
Description
The issue allows an unprivileged application to connect and execute shell scripts as the root user through the
com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper component. This component implements an XPC service, enabling the execution of shell scripts with root privileges.Recommendations
For Kromtech MacKeeper version 3.20.4, consider disabling the
com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper component as a temporary workaround to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾