Description (CNA)
A flaw has been found in Magnetism Studios Endurance up to 3.3.0 on macOS. This affects the function loadModuleNamed:WithReply of the file /Applications/Endurance.app/Contents/Library/LaunchServices/com.MagnetismStudios.endurance.helper of the component NSXPC Interface. Executing manipulation can lead to missing authentication. The attack needs to be launched locally. The exploit has been published and may be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Magnetism Studios / Endurance | affected 3.0; affected 3.1; affected 3.2; affected 3.3.0 |
CWE
CWE-306, CWE-287
References
- https://vuldb.com/?id.325691
- https://vuldb.com/?ctiid.325691
- https://vuldb.com/?submit.653994
- https://github.com/SwayZGl1tZyyy/n-days/blob/main/Endurance/README.md
- https://github.com/SwayZGl1tZyyy/n-days/blob/main/Endurance/README.md#proof-of-concept
ADP enrichment
No English description supplied.
No references supplied.