CVE-2009-0152

published 2009-05-13

CVE-2009-0152: iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apple	mac_os_x	>= 10.5.0 < 10.5.7	10.5.7
apple	mac_os_x_server	>= 10.5.0 < 10.5.7	10.5.7

CWE-312 CWE-311