NetSight
medium4.4

CVE-2012-4677

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.

Impact

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.

Affected products

VendorProductAffected versions
GoogleTunnelblick
through 3.3beta20

Weakness classification

References