{"affected":[{"affectedData":[{"product":"GOG Galaxy","vendor":"GOG.COM","versions":[{"status":"affected","version":"Gog Galaxy 1.2.47 (macOS)"}]}],"source":"talos-cna@cisco.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:gog:galaxy:1.2.47:*:*:*:*:macos:*:*","matchCriteriaId":"971B17D1-D582-4732-AA31-620F8EC7B574","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An exploitable local denial-of-service vulnerability exists in the privileged helper tool of GOG Galaxy's Games, version 1.2.47 for macOS. An attacker can send malicious data to the root-listening service, causing the application to terminate and become unavailable."},{"lang":"es","value":"Existe una vulnerabilidad de denegación de servicio (DoS) local explotable en la herramienta \"helper\" privilegiada de los juegos de GOG Galaxy, en su versión 1.2.47 para macOS. Un atacante puede enviar datos maliciosos al servicio de escucha root, haciendo que la aplicación se termine y deje de estar disponible."}],"id":"CVE-2018-4053","lastModified":"2026-06-17T01:58:17.717","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":2.1,"confidentialityImpact":"NONE","integrityImpact":"NONE","vectorString":"AV:L/AC:L/Au:N/C:N/I:N/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":6.2,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.0"},"exploitabilityScore":2.5,"impactScore":3.6,"source":"talos-cna@cisco.com","type":"Secondary"}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-04-02T16:29:00.560","references":[{"source":"talos-cna@cisco.com","tags":["Third Party Advisory"],"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0727"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2018-0727"}],"sourceIdentifier":"talos-cna@cisco.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-20"}],"source":"nvd@nist.gov","type":"Primary"}]}