PT-2019-10785 · Apple+1 · Macos X+1

Publicado 2019-03-08 · Atualizado 2022-06-07 · CVE-2018-4055

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pixar Renderman version 22.2.0

Description A local privilege escalation issue exists in the install helper tool of the Mac OS X version of the software. This allows a user with local access to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.

Recommendations For Pixar Renderman version 22.2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-4055

Produtos afetados

Macos X

Pixar Renderman

Referências · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0729 · Exploit
• https://osv.dev/vulnerability/CVE-2018-4055 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-4055 · Nota de Segurança