Search criteria

1 vulnerability found for Wacom Tablet Driver by Wacom

JVNDB-2023-000054

Vulnerability from jvndb - Published: 2023-05-25 13:40 - Updated:2023-05-25 13:40
Severity ?
Summary
Wacom Tablet Driver installer for macOS vulnerable to improper link resolution before file access
Details
Wacom Tablet Driver installer for macOS provided by Wacom contains an improper link resolution before file access vulnerability (CWE-59). Koh M. Nakagawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Impacted products
Show details on JVN DB website

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-000054.html",
  "dc:date": "2023-05-25T13:40+09:00",
  "dcterms:issued": "2023-05-25T13:40+09:00",
  "dcterms:modified": "2023-05-25T13:40+09:00",
  "description": "Wacom Tablet Driver installer for macOS provided by Wacom contains an improper link resolution before file access vulnerability (CWE-59).\r\n\r\nKoh M. Nakagawa reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-000054.html",
  "sec:cpe": {
    "#text": "cpe:/o:wacom:wacom_tablet_driver",
    "@product": "Wacom Tablet Driver",
    "@vendor": "Wacom",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "7.6",
      "@severity": "High",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:C/I:C/A:C",
      "@version": "2.0"
    },
    {
      "@score": "7.7",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2023-000054",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN90278893/index.html",
      "@id": "JVN#90278893",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-27529",
      "@id": "CVE-2023-27529",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-27529",
      "@id": "CVE-2023-27529",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-59",
      "@title": "Link Following(CWE-59)"
    }
  ],
  "title": "Wacom Tablet Driver installer for macOS vulnerable to improper link resolution before file access"
}