CVE-2011-0190

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.

Score

CVSS 2.0 4.3 Medium

Status

Modified - product-security@apple.com

Published

2011-03-23

Last modified

2024-09-17

Weaknesses

CWE-20

Affected products

• Installer (Apple)
• Mac Os X (Apple)
• Mac Os X Server (Apple)

References

• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
• http://support.apple.com/kb/HT4581