{ "CVE_data_meta" : { "ASSIGNER" : "office@obdev.at", "ID" : "CVE-2017-2675", "STATE" : "PUBLIC" }, "affects" : { "vendor" : { "vendor_data" : [ { "product" : { "product_data" : [ { "product_name" : "Little Snitch", "version" : { "version_data" : [ { "version_value" : "3.0 - 3.7.3" } ] } } ] }, "vendor_name" : "Objective Development Software GmbH" } ] } }, "data_format" : "MITRE", "data_type" : "CVE", "data_version" : "4.0", "description" : { "description_data" : [ { "lang" : "eng", "value" : "Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file \"at.obdev.littlesnitchd.plist\" which gets installed to /Library/LaunchDaemons." } ] }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "eng", "value" : "unspecified" } ] } ] }, "references" : { "reference_data" : [ { "name" : "https://twitter.com/patrickwardle/status/849076615170711552", "refsource" : "MISC", "url" : "https://twitter.com/patrickwardle/status/849076615170711552" }, { "name" : "https://www.obdev.at/products/littlesnitch/releasenotes.html", "refsource" : "CONFIRM", "url" : "https://www.obdev.at/products/littlesnitch/releasenotes.html" } ] } }