CVE-2009-2808

CVE-2009-2808 affects Apple Mac OS X up to, but not including, 10.6.2. The Help Viewer retrieves Apple Help content over plain HTTP instead of HTTPS, allowing a man-in-the-middle to deliver a crafted help:runscript response and potentially execute arbitrary code. The impact is dependent on the ab...

Apple Mac OS X 2009-006更新修复多个安全漏洞

BUGTRAQ ID: 36956 CVE ID:...