Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-894w-wvwv-qc4q

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory.

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory.

EPSS

Процентиль: 18%
0.00056
Низкий

Связанные уязвимости

nvd
почти 19 лет назад

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory.

EPSS

Процентиль: 18%
0.00056
Низкий