Vendor
Arturia
2 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 8.2
World-writable uninstall script executed as root in Arturia Software Center
When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the file permissions 777, meaning it is writable by any user. When uninstalling a plug…
-
High 7.8
Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center
The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading …