CVE-2018-4051
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-4051
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An exploitable local privilege escalation vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can globally create directories and subdirectories on the root file system, as well as change the permissions of existing directories.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GOG Galaxy 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GOG Galaxy是一款游戏客户端程序。该程序用于安装、启动和更新游戏。 基于macOS平台的GOG Galaxy 1.2.47版本中的特权助手工具存在输入验证漏洞。攻击者可利用该漏洞在root文件系统上全局范围内创建目录和子目录并更改已存在的目录权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| GOG.COM | GOG Galaxy | Gog Galaxy 1.2.47 (macOS) | - |
II. Public POCs for CVE-2018-4051
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-4051
请登录查看更多情报信息。
Same Patch Batch · GOG.COM · 2019-04-02 · 5 CVEs total
| CVE-2018-3974 | GOG Galaxy 权限许可和访问控制问题漏洞 | |
| CVE-2018-4049 | GOG Galaxy 权限许可和访问控制问题漏洞 | |
| CVE-2018-4052 | GOG Galaxy 信息泄露漏洞 | |
| CVE-2018-4053 | GOG Galaxy 输入验证错误漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2018-4051
No comments yet