Privilege Escalation in Tunnelblick by Google
CVE-2012-4677

Currently unrated

Key Information:

Vendor

Google
Status
Tunnelblick
Vendor
CVE Published:
26 August 2012

What is CVE-2012-4677?

A flaw in Tunnelblick versions prior to 3.3beta20 allows local users to gain elevated privileges through manipulation of the Info.plist file. An attacker can exploit this vulnerability by altering the gOkIfNotSecure value, which grants them unauthorized access to restricted functions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://code.google.com/p/tunnelblick/issues/detail?id=212
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.