cbcvebase.
CVE-2012-4677
published 2012-08-26

CVE-2012-4677: Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.

PriorityP415medium4.4CVSS 2.0
AVLACMAuNCPIPAP
EPSS
0.15%
5.1th percentile
Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.

Affected

1 ranges
VendorProductVersion rangeFixed in
googletunnelblick<= 3.3beta20—
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.