Wacom Tablet Driver installer prior to 6.4.2-1 (for macOS) contains an improper link resolution before file access vulnerability. When a user is tricked to execute a small malicious script before executing the affected version of the installer, arbitrary code may be executed with the root privilege.
References
| Link | Resource |
|---|---|
| https://jvn.jp/en/jp/JVN90278893/ | Third Party Advisory |
| https://www.wacom.com/en-us/support/product-support/drivers | Product |
| https://jvn.jp/en/jp/JVN90278893/ | Third Party Advisory |
| https://www.wacom.com/en-us/support/product-support/drivers | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jvn.jp/en/jp/JVN90278893/ - Third Party Advisory | |
| References | () https://www.wacom.com/en-us/support/product-support/drivers - Product |
01 Jun 2023, 12:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Apple macos
Wacom tablet Driver Installer Apple Wacom |
|
| CWE | CWE-59 | |
| CPE | cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* cpe:2.3:a:wacom:tablet_driver_installer:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| References | (MISC) https://jvn.jp/en/jp/JVN90278893/ - Third Party Advisory | |
| References | (MISC) https://www.wacom.com/en-us/support/product-support/drivers - Product |
Information
Published : 2023-05-25 10:15
Updated : 2024-11-21 07:53
NVD link : CVE-2023-27529
Mitre link : CVE-2023-27529
CVE.ORG link : CVE-2023-27529
JSON object : View
Products Affected
apple
- macos
wacom
- tablet_driver_installer
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')