cve/2023/CVE-2023-27529.md

18 lines
856 B
Markdown
Raw Normal View History

2024-05-25 21:48:12 +02:00
### [CVE-2023-27529](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27529)
![](https://img.shields.io/static/v1?label=Product&message=Wacom%20Tablet%20Driver%20installer&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20link%20resolution%20before%20file%20access%20('Link%20Following')&color=brighgreen)
### Description
Wacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulnerability. When a user is tricked to execute a small malicious script before executing the affected version of the installer, arbitrary code may be executed with the root privilege.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/kohnakagawa/kohnakagawa