Code injection

2013-03-1520:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.5%

JSON

Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream.

CPENameOperatorVersion
mac_os_xeq10.6.8
mac_os_xeq10.7.2
mac_os_xeq10.7.5
mac_os_xeq10.7.3
mac_os_xeq10.7.4
mac_os_xeq10.7.0
mac_os_xeq10.7.1
mac_os_x_servereq10.6.8
mac_os_x_servereq10.7.3
mac_os_x_servereq10.7.1

Name	Operator	Version
mac_os_x	eq	10.6.8
mac_os_x	eq	10.7.2
mac_os_x	eq	10.7.5
mac_os_x	eq	10.7.3
mac_os_x	eq	10.7.4
mac_os_x	eq	10.7.0
mac_os_x	eq	10.7.1
mac_os_x_server	eq	10.6.8
mac_os_x_server	eq	10.7.3
mac_os_x_server	eq	10.7.1