Jan Souček

A race condition in kext tools allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation.

The issue allows remote attackers to trigger a refresh operation and cause a visit to an arbitrary web site via a crafted HTML e-mail message.