CVE-2018-4051 Vulnerability Details

  /     /     /  

CVE-2018-4051 Metadata Quick Info

CVE Published: 02/04/2019 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: talos | Vendor: GOG.COM | Product: GOG Galaxy
Status : PUBLISHED

---

CVE-2018-4051 Description

An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy\'s Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: improper input validation
Source: GOG.COM

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).