VULNERABILITY INTELLIGENCE
CVE-2011-0190
CVSS score4.3 MEDIUM
EPSS probability1.28%
CISA KEVNot currently listed
Published2011-03-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N
Description
Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- product-security@apple.com — Patch, Vendor Advisory
- product-security@apple.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory