Vulnerability in Google Tunnelblick

CVE-2012-4677

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.

EPSS: 0.002 (5.2th percentile) — read the EPSS interpretation.

Affected products

Google Tunnelblick
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

cve@mitre.org (x_refsource_MISC)