Unscored severity · published Mar 23, 2011
CVE-2011-0190
Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Installer · Apple
All versions, or not specified · source: NVD
MO
Mac OS X · Apple
10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +1 more · source: NVD
MO
Mac OS X Server · Apple
10.6.0; 10.6.1; 10.6.2; 10.6.3; 10.6.4; 10.6.5; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0190
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0190
Patch
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
Patch
http://support.apple.com/kb/HT4581
More from Installer
–
CVE-2007-0465
Format string vulnerability in Apple Installer 2.1.5 on Mac OS X 10.4.8 allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a (1) PKG,…