CVE Vulnerabilities

CVE-2009-2808

Published: Nov 10, 2009 | Modified: Nov 17, 2009
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.4 MEDIUM
AV:A/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.

Affected Software

Name Vendor Start Version End Version
Mac_os_x Apple 10.5.8 10.5.8
Mac_os_x Apple 10.4.3 10.4.3
Mac_os_x Apple 10.2.5 10.2.5
Mac_os_x Apple 10.2.7 10.2.7
Mac_os_x Apple 10.0.2 10.0.2
Mac_os_x Apple 10.2.8 10.2.8
Mac_os_x Apple 10.2.1 10.2.1
Mac_os_x Apple 10.5.6 10.5.6
Mac_os_x Apple 10.3.1 10.3.1
Mac_os_x Apple 10.3.5 10.3.5
Mac_os_x Apple 10.3.0 10.3.0
Mac_os_x Apple 10.4.1 10.4.1
Mac_os_x Apple 10.1 10.1
Mac_os_x Apple 10.5.5 10.5.5
Mac_os_x Apple 10.5.1 10.5.1
Mac_os_x Apple 10.0.1 10.0.1
Mac_os_x Apple 10.4.10 10.4.10
Mac_os_x Apple 10.0.3 10.0.3
Mac_os_x Apple 10.4.9 10.4.9
Mac_os_x Apple 10.1.4 10.1.4
Mac_os_x Apple 10.2.4 10.2.4
Mac_os_x Apple 10.4.7 10.4.7
Mac_os_x Apple 10.4.4 10.4.4
Mac_os_x Apple 10.6 10.6
Mac_os_x Apple 10.3.2 10.3.2
Mac_os_x Apple 10.5.3 10.5.3
Mac_os_x Apple 10.5.0 10.5.0
Mac_os_x Apple 10.2.2 10.2.2
Mac_os_x Apple 10.0 10.0
Mac_os_x Apple 10.3.7 10.3.7
Mac_os_x Apple 10.0.0 10.0.0
Mac_os_x Apple 10.4.0 10.4.0
Mac_os_x Apple 10.1.0 10.1.0
Mac_os_x Apple 10.1.3 10.1.3
Mac_os_x Apple 10.5 10.5
Mac_os_x Apple 10.3.6 10.3.6
Mac_os_x Apple 10.5.2 10.5.2
Mac_os_x Apple 10.1.5 10.1.5
Mac_os_x Apple 10.4 10.4
Mac_os_x Apple 10.2.0 10.2.0
Mac_os_x Apple 10.4.6 10.4.6
Mac_os_x Apple 10.3.8 10.3.8
Mac_os_x Apple 10.1.1 10.1.1
Mac_os_x Apple 10.5.7 10.5.7
Mac_os_x Apple 10.4.5 10.4.5
Mac_os_x Apple 10.3.9 10.3.9
Mac_os_x Apple 10.3.4 10.3.4
Mac_os_x Apple 10.4.11 10.4.11
Mac_os_x Apple 10.4.8 10.4.8
Mac_os_x Apple 10.3.3 10.3.3
Mac_os_x Apple 10.2.6 10.2.6
Mac_os_x Apple * 10.6.1
Mac_os_x Apple 10.2.3 10.2.3
Mac_os_x Apple 10.2 10.2
Mac_os_x Apple 10.4.2 10.4.2
Mac_os_x Apple 10.5.4 10.5.4
Mac_os_x Apple 10.3 10.3
Mac_os_x Apple 10.0.4 10.0.4
Mac_os_x Apple 10.1.2 10.1.2

References