CVE-2014-4677

The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbitrary commands with…

published February 22, 2017

CVSS
—
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbitrary commands with root privileges via shell metacharacters in the xmlPath argument.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00645 · 50.0th percentile
Published
2017-02-22T16:00Z
EPSS history
Timeline
  • 22 FEB 16:00Z
    The installPackage function in the installerHelper subcomponent in Libmacgpg in GPG Suite before 2015.06 allows local users to execute arbitrary commands with…
    cvelistv5