CVE-2018-4053

An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable.

Score

CVSS 3.0 6.2 Medium

Status

Modified - talos-cna@cisco.com

Published

2019-04-02

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Galaxy (Gog)
• Gog Galaxy (Gog.com)

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0727