Groupnotes Inc. Videostream Mac client allows for privilege escalation to root account

Post Reply
Shane1145
Posts: 1836
Joined: Wed Sep 25, 2024 2:31 pm

Groupnotes Inc. Videostream Mac client allows for privilege escalation to root account

Post by Shane1145 »

Groupnotes Inc. Videostream Mac client installs a LaunchDaemon that runs with root privileges. The daemon is vulnerable to a race condition that allows for arbitrary file writes. A low privileged attacker can escalate privileges to root on affected systems.

https://www.kb.cert.org/vuls/id/757109
Post Reply