TWSL2016-003: Sophos Anti-Virus Mac OS X Version Update File Unlinking Vulnerability

Posted on by

While researching inter-process communication on Mac OS X, I found a small security issue with Sophos Anti-Virus for Mac: any local user can remove arbitrary files on the system via the Update functionality of the product. This specific issue was…