CVE-2011-0190: Input Validation
First published: Wed Mar 23 2011(Updated: )
Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Mac OS X | =10.6.3 | |
| Apple Mac OS X | =10.6.6 | |
| Apple Mac OS X | =10.6.1 | |
| Apple Mac OS X | =10.6.0 | |
| Apple Mac OS X | =10.6.2 | |
| Apple Mac OS X | =10.6.4 | |
| Apple Installer | ||
| Apple Mac OS X | =10.6.5 | |
| Apple Mac OS X Server | =10.6.3 | |
| Apple Mac OS X Server | =10.6.6 | |
| Apple Mac OS X Server | =10.6.4 | |
| Apple Mac OS X Server | =10.6.5 | |
| Apple Mac OS X Server | =10.6.1 | |
| Apple Mac OS X Server | =10.6.2 | |
| Apple Mac OS X Server | =10.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple mac os x
- version/apple mac os x/10.6.3
- version/apple mac os x/10.6.6
- version/apple mac os x/10.6.1
- version/apple mac os x/10.6.0
- version/apple mac os x/10.6.2
- version/apple mac os x/10.6.4
- canonical/apple installer
- version/apple mac os x/10.6.5
- canonical/apple mac os x server
- version/apple mac os x server/10.6.3
- version/apple mac os x server/10.6.6
- version/apple mac os x server/10.6.4
- version/apple mac os x server/10.6.5
- version/apple mac os x server/10.6.1
- version/apple mac os x server/10.6.2
- version/apple mac os x server/10.6.0