PT-2019-8746 · Kromtech · Mackeeper

Published 2019-06-05 · Updated 2020-08-24 · CVE-2018-10171

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kromtech MacKeeper version 3.20.4

Description The issue allows an unprivileged application to connect and execute shell scripts as the root user through the com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper component. This component implements an XPC service, enabling the execution of shell scripts with root privileges.

Recommendations For Kromtech MacKeeper version 3.20.4, consider disabling the com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper component as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-10171

Affected Products

Mackeeper

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-10171 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10171 · Vendor Advisory
• https://t.me/cibsecurity/4718 · Telegram Post
• https://versprite.com/advisories/mackeeper · Note