CVE-2011-0190

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-03-23 · updated 2026-06-16
Weakness: CWE-20

Description

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.

Affected products

Apple Installer: all versions
macOS: 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4, 10.6.5 (+1)
Apple Mac Os X Server: 10.6.0, 10.6.1, 10.6.2, 10.6.3, 10.6.4, 10.6.5 (+1)

References

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
http://support.apple.com/kb/HT4581
http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
http://support.apple.com/kb/HT4581

Get alerted when CVE-2011-0190 or the next vulnerability affects your stack