CVE-2012-3486

CVE-2012-3486 describes a local privilege escalation vulnerability in Tunnelblick 3.3beta20 and earlier, affecting Google Tunnelblick. An attacker can exploit this by crafting a malicious OpenVPN configuration file that executes arbitrary scripts when an OpenVPN event occurs. The vulnerability has a CVSS score of 6.9, indicating high impact on confidentiality, integrity, and availability, but requires medium attack complexity and local access. There is no public exploit code available, nor is there evidence of active exploitation or significant community discussion.