← All advisories

Unrated severityNVD Advisory· Published Aug 26, 2012· Updated Jun 16, 2026

CVE-2012-4677

CVE-2012-4677

Description

Tunnelblick 3.3beta20 and earlier allows local users to gain privileges by using a crafted Info.plist file to control the gOkIfNotSecure value.

Affected products

2

Google/Tunnelblick
cpe:2.3:a:google:tunnelblick:*:*:*:*:*:*:*:*
Range: <=3.3beta20
Tunnelblick/Tunnelblickllm-fuzzy
Range: <=3.3beta20

Patches

Vulnerability mechanics

References

1

code.google.com/p/tunnelblick/issues/detailnvd

News mentions

0

No linked articles in our index yet.