{"uuid": "2db27624-187d-4310-b1e5-3d0140b43531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-4284", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/setuid_viscosity.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Jason A. Donenfeld\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in Viscosity 1.4.1 on Mac OS X. The\\n            vulnerability exists in the setuid ViscosityHelper, where an insufficient\\n            validation of path names allows execution of arbitrary python code as root.\\n            This module has been tested successfully on Viscosity 1.4.1 over Mac OS X\\n            10.7.5.\", \"disclosure_date\": \"2012-08-12\", \"fullname\": \"exploit/osx/local/setuid_viscosity\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"Viscosity setuid-set ViscosityHelper Privilege Escalation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/osx/local/setuid_viscosity.rb\", \"platform\": \"OSX\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"osx/local/setuid_viscosity\", \"references\": [\"CVE-2012-4284\", \"OSVDB-84709\", \"EDB-20485\", \"URL-http://blog.zx2c4.com/791\"], \"rport\": null, \"session_types\": [\"shell\"], \"targets\": [\"Viscosity 1.4.1 / Mac OS X x86\", \"Viscosity 1.4.1 / Mac OS X x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:31.922696Z"}