Secunia
Login
|
|
CVE Reference: CVE-2011-3224 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2011-3224 |
|
|
Description: The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server. |
|
|
CVE Status: Candidate |
|
|
References: OSVDB 76375 CONFIRM http://support.apple.com/kb/HT5002 BID 50085 APPLE http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html |
|
| Return to the previous page. |
