Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple Mac OS X HTTPS连接中间人攻击漏洞
Vulnerability Description
Mac OS X是苹果家族机器所使用的操作系统。 Apple 2009-006安全更新修复了Mac OS X中的多个安全漏洞，本地或远程攻击者可能利用这些漏洞导致拒绝服务、读取敏感信息或执行任意代码。 Help Viewer没有使用HTTPS查看Apple Help内容，本地网络中的用户可以发送包含有恶意help:runscript链接的伪造HTTP响应。
CVSS Information
N/A
Vulnerability Type
N/A