high7.8Public exploit code
CVE-2019-10038
Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Evernote 7.9 - Code Execution via Path Traversal2019-04-18 · local · macos
Impact
Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Evernote | Evernote | Version 7.9 |
Weakness classification
References
- NVD record
- CVE.org record
- https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing
- https://evernote.com/security/updates
- https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html
- https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing
- https://evernote.com/security/updates
- https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html