Mac OS X v10.6.8 Multiple Vulnerabilities (2011-006)

This host is missing an important security update according to Mac OS X 10.6.8 Update/Mac OS X Security Update 2011-006. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2011-3224

The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server...

CVE-2011-3224

CVE-2011-3224 affects the Apple Mac OS X User Documentation component up to version 10.6.8. The vulnerability arises because App Store help information could be updated over HTTP sessions, allowing a man-in-the-middle attacker spoofing the HTTP server to execute arbitrary code. The impact is limi...