PT-2019-10785 · Apple+1 · Macos X+1

Published 2019-03-08 · Updated 2022-06-07 · CVE-2018-4055

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pixar Renderman version 22.2.0

Description A local privilege escalation issue exists in the install helper tool of the Mac OS X version of the software. This allows a user with local access to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.

Recommendations For Pixar Renderman version 22.2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-4055

Affected Products

Macos X

Pixar Renderman

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2018-0729 · Exploit
• https://osv.dev/vulnerability/CVE-2018-4055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4055 · Security Note