Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mac_os_x | Apple | 10.6.8 (including) | 10.6.8 (including) |
Mac_os_x_server | Apple | 10.6.8 (including) | 10.6.8 (including) |