First published: Fri Oct 08 2010(Updated: )
The Limit Mail feature in the Parental Controls functionality in Mail on Apple Mac OS X does not properly enforce the correspondence whitelist, which allows remote attackers to bypass intended access restrictions and conduct e-mail communication by leveraging knowledge of a child's e-mail address and a parent's e-mail address, related to parental notification of unapproved e-mail addresses.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Mail | ||
Apple iOS and macOS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3887 has a moderate severity rating due to its ability to bypass parental control restrictions.
CVE-2010-3887 allows remote attackers to bypass intended email access restrictions in the Mail application.
CVE-2010-3887 affects the Mail application on certain versions of macOS, particularly before it was patched.
To mitigate CVE-2010-3887, ensure that your software is updated to a version that includes the patch for this vulnerability.
Yes, Apple released patches to address CVE-2010-3887, and it's recommended to apply these updates.