MacKeeper URL Handler Remote Code Execution Vulnerability
BID:74591
Info
MacKeeper URL Handler Remote Code Execution Vulnerability
| Bugtraq ID: | 74591 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 07 2015 12:00AM |
| Updated: | May 07 2015 12:00AM |
| Credit: | Braden Thomas |
| Vulnerable: |
Kromtech Alliance MacKeeper 3.4 Kromtech Alliance MacKeeper 3.0 Kromtech Alliance MacKeeper 2.0 Kromtech Alliance MacKeeper 1.0 |
| Not Vulnerable: |
Kromtech Alliance MacKeeper 3.4.1 |
Discussion
MacKeeper URL Handler Remote Code Execution Vulnerability
MacKeeper is prone to a remote code-execution vulnerability because it fails to properly validate the user-supplied input.
Attackers can exploit this issue to execute arbitrary code with root privileges.
MacKeeper 3.4 and prior are vulnerable.
MacKeeper is prone to a remote code-execution vulnerability because it fails to properly validate the user-supplied input.
Attackers can exploit this issue to execute arbitrary code with root privileges.
MacKeeper 3.4 and prior are vulnerable.
Exploit / POC
MacKeeper URL Handler Remote Code Execution Vulnerability
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
MacKeeper URL Handler Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
MacKeeper URL Handler Remote Code Execution Vulnerability
References:
References:
- Braden Thomas Twitter Page- POC (Twitter)
- MacKeeper Homepage (MacKeeper)
- MacKeeper Security Advisory (MacKeeper)
- Security Advisory: MacKeeper URL handler remote code execution vulnerability and (SecureMac)