Fast CAD Reader Incorrect File Permissions Vulnerability Allowing Dylib Hijacking on MacOS

A vulnerability exists in the Fast CAD Reader application for MacOS, developed by Beijing Honghu Yuntu Technology. The application is installed with overly permissive file permissions, allowing all users and applications to read, write, and execute files. This permission setting is contrary to standard macOS security practices, which recommend more restrictive permissions. The excessive permissions can be exploited for Dylib hijacking, a technique that allows for privilege escalation. This vulnerability is present in all versions of Fast CAD Reader through 4.1.5.

Impact

Exploitation of this vulnerability can lead to unauthorized privilege escalation by allowing a user or application to gain elevated rights.