In Notion Web Clipper 1.0.3(7), a .nib file is susceptible to the Dirty NIB attack. NIB files can be manipulated to execute arbitrary commands. Additionally, even if a NIB file is modified within an application, Gatekeeper may still permit the execution of the application, enabling the execution of arbitrary commands within the application's context. NOTE: the vendor's perspective is that this is simply an instance of CVE-2022-48505, cannot properly be categorized as a product-level vulnerability, and cannot have a product-level fix because it is about incorrect caching of file signatures on macOS.
Metrics
Affected Vendors & Products
References
History
Tue, 12 Nov 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-01-31T00:00:00
Updated: 2024-11-12T20:37:48.854Z
Reserved: 2024-01-21T00:00:00
Link: CVE-2024-23745
Vulnrichment
Updated: 2024-08-01T23:13:07.384Z
NVD
Status : Modified
Published: 2024-01-31T02:15:54.520
Modified: 2024-11-21T08:58:18.473
Link: CVE-2024-23745
Redhat
No data.