CVE-2011-3224

No fix known EPSS 2%

The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.

Published 2011-10-14 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server