CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL.
CPE | Name | Operator | Version |
---|---|---|---|
mac_os_x | eq | 10.7.2 | |
mac_os_x | eq | 10.7.0 | |
mac_os_x | eq | 10.7.1 | |
mac_os_x_server | eq | 10.7.1 | |
mac_os_x_server | eq | 10.7.2 | |
mac_os_x_server | eq | 10.7.0 |