Improper input validation in Pixar Renderman
CVE-2018-4055
A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.005 (42.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 42nd percentile — 42.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
- Pixar Renderman — versions 22.2.0
- Talos Pixar Renderman — versions Renderman 22.2.0 for Mac OS X
Weakness classification (CWE)
References
- talosintelligence.com/vulnerability_reports/TALOS-2018-0729 (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2018-4055?
- CVE-2018-4055 is a medium-severity vulnerability in Pixar Renderman, classified under Improper Input Validation. CVSS score: 5.5/10. Published 2019-03-08.
- How severe is CVE-2018-4055?
- Medium severity. CVSS v3 base score is 5.5 out of 10.