CVE-2012-4284

Name of the Vulnerable Software and Affected Versions Viscosity version 1.4.1

Description A Privilege Escalation issue exists due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code.

Recommendations For Viscosity version 1.4.1, consider restricting access to the ViscosityHelper binary until a patch is available. As a temporary workaround, disabling the setuid-set functionality for the ViscosityHelper binary may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.