Design/Logic Flaw

The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Appl...

CVE-2011-1516: Undefined Security Weakness

The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Appl...

PT-2011-3183

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5.x through 10.7.x Description The issue concerns the kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles, which fail to propagate restrictions to all created processes. This allows remote attackers to access...