CVE-2013-0973
No fix known EPSS 1%
Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream.
Products: apple mac_os_x, apple mac_os_x_server