CVE-2011-0190 — Improper Input Validation in Apple MAC OS X

CWE-20 — Improper Input Validation3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.2%
top 54.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple MAC OS XApple MAC OS X Server
Timeline
PublishedMar 23
Latest updateMay 17

Description

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDapple/mac_os_x_server7 versions+6
▶NVDapple/mac_os_x7 versions+6

Patches

Patch: lists.apple.com ↗Patch: support.apple.com ↗Patch: lists.apple.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-jrv7-ph2c-gw4v: Install Helper in Installer in Apple Mac OS X before 10↗2022-05-17
▶
CVEList
CVE-2011-0190: Install Helper in Installer in Apple Mac OS X before 10↗2011-03-23
▶
CVE-2011-0190 — Improper Input Validation in Apple | cvebase