CVE-2019-10038 - Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file

Back Back to CVE browser

HIGH

Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file

Published May 31, 2019

7.8

HIGH

CVSS 3.0

EPSS 1.31%

Description

Evernote 7.9 on macOS allows attackers to execute arbitrary programs by embedding a reference to a local executable file such as the /Applications/Calculator.app/Contents/MacOS/Calculator file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (4)

https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing
x_refsource_MISCBroken Link
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2102
Advisory
https://evernote.com/security/updates
x_refsource_MISCVendor Advisory
https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://drive.google.com/file/d/1cmWixK1vAh7oZ2y3Y3ZtVeSoTRp8c1Ts/view?usp=sharing		x_refsource_MISCBroken Link
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2102		Advisory
https://evernote.com/security/updates		x_refsource_MISCVendor Advisory
https://www.inputzero.io/2019/04/evernote-cve-2019-10038.html		x_refsource_MISCThird Party Advisory