Phiewer dylib Injection Vulnerability Leading to Command Execution

A vulnerability in Phiewer version 4.1.0 allows for dynamic library (dylib) injection, which can lead to unauthorized command execution. This flaw enables attackers to inject a dylib file that could potentially allow remote control and unauthorized access to sensitive user data on macOS.

Impact

Exploitation of this vulnerability allows for local command execution.

Reproduction

To reproduce this vulnerability, use the provided dylib file to inject a command into the Phiewer application. Set the DYLD_INSERT_LIBRARIES environment variable to include the injected dylib file, and then launch Phiewer from its application directory.