PT-2019-10784 · Apple+1 · Macos X+1

Published 2019-03-08 · Updated 2022-06-07 · CVE-2018-4054

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Pixar Renderman version 22.2.0

Description A local privilege escalation issue exists in the install helper tool of the Mac OS X version of the software. This allows a user with local access to escalate their privileges to root. An attacker would need local access to the machine to successfully exploit this flaw.

Recommendations For Pixar Renderman version 22.2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-4054

Affected Products

Macos X

Pixar Renderman

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0728 · Exploit
• https://osv.dev/vulnerability/CVE-2018-4054 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4054 · Security Note