CVE-2011-3224

Published Oct 14, 2011 CVSS 2.0 · 2.6 Low EPSS 1.8% KEV · Not listed
Description
The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2011-3188 The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 6, 2024, 11:29 PM
Reserved
Aug 19, 2011, 12:00 AM
Status
Modified
Published
Oct 14, 2011, 10:55 AM
Modified
Jun 16, 2026, 11:32 PM