CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: the installpackage function in the installerhelper subcomponent in libmacgpg in gpg suite before 2015.06 allows local users to execute arbitrary commands with root privileges via shell metacharacters in the xmlpath argument.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2017-02-22
Last Modified Date: 2018-05-02