Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
upport/errata/RHSA-2011-1085.html - http://support.apple.com/kb/HT4802 - http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00015.html - http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00016.html - http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00028.html - http://www.debian.org/security/2011/dsa-2294 - http://support.apple.com/kb/HT5002 - http://www.mandriva.com/security/advisories?name=MDVSA-2011:120 - http://www.appleinsider.com/articles/11/07/06/hackers_release_new_browser_based_ios_jailbreak_based_on_pdf_exploit.html - http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html - http://lists.nongnu.org/archive/html/freetype-deve
/lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00014.html - http://lists.nongnu.org/archive/html/freetype-devel/2011-07/msg00026.html
CVE ID: CVE-2011-0227 State: PUBLISHED Published: 2011-07-19T22:00:00Z Last Updated: 2024-09-16T22:57:11.206Z Vendors: n/a Products: n/a Problem Types: n/a Description: The queueing primitives in IOMobileFrameBuffer in Apple iOS before 4.2.9 and 4.3.x before 4.3.4 do not properly perform type conversion, which allows local users to gain privileges via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4803 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00000.html - http://lists.apple.com/archives/security-announce/2011//Jul/msg00001.html - http://support.apple.com/kb/HT4802
CVE ID: CVE-2011-0228 State: PUBLISHED Published: 2011-08-29T20:00:00 Last Updated: 2024-08-06T21:43:15.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2011//Jul/msg00005.html - https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt - http://www.s
urity-announce/2011//Jul/msg00005.html - https://www.trustwave.com/spiderlabs/advisories/TWSL2011-007.txt - http://www.securityfocus.com/bid/48877 - http://support.apple.com/kb/HT4824 - http://secunia.com/advisories/45369 - http://www.securityfocus.com/archive/1/518982/100/0/threaded - http://lists.apple.com/archives/security-announce/2011//Jul/msg00004.html - http://support.apple.com/kb/HT4825 - http://securityreason.com/securityalert/8361 - http://securitytracker.com/id?1025837
CVE ID: CVE-2011-0229 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T21:43:15.515Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple Type Services (ATS) in Apple Mac OS X through 10.6.8 does not properly handle embedded Type 1 fonts, which allows remote attackers to execute arbitrary code via a crafted document that triggers an out-of-bounds memory access. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/50091 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-0230 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T21:43:15.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the ATSFontDeactivate API in Apple Type Services (ATS) in Apple Mac OS X before 10.7.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-0231 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T21:43:15.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: CFNetwork in Apple Mac OS X before 10.7.2 does not properly follow an intended cookie-storage policy, which makes it easier for remote web servers to track users via a cookie, related to a "synchronization issue." Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085
CVE ID: CVE-2011-0232 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0233 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:43:15.382Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0234 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0235 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0236 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:07.668Z Description: No description available.
CVE ID: CVE-2011-0237 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-ann
CVE ID: CVE-2011-0238 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.810Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0239 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:08.157Z Description: No description available.
CVE ID: CVE-2011-0240 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.649Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-ann
CVE ID: CVE-2011-0241 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ImageIO in Apple Safari before 5.0.6 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted TIFF image with CCITT Group 4 encoding. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT5130 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html - http://support.apple.com/kb/HT4999 - http://support.apple.c
pple.com/archives/security-announce/2012/Feb/msg00000.html - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT5001 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html - http://support.apple.com/kb/HT5281 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00002.html - http://lists.apple.com/archives/security-announce/2012/May/msg00001.html
CVE ID: CVE-2011-0242 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving a URL that contains a username. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://support.apple.com/kb/HT4999 - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0243 State: REJECTED Published: N/A Last Updated: 2023-09-14T18:40:08.541Z Description: No description available.
CVE ID: CVE-2011-0244 State: PUBLISHED Published: 2011-07-21T23:00:00Z Last Updated: 2024-09-16T19:35:23.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit in Apple Safari before 5.0.6 allows user-assisted remote attackers to read arbitrary files via vectors related to improper canonicalization of URLs within RSS feeds. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-announce/2011//Jul/msg00002.html
CVE ID: CVE-2011-0245 State: PUBLISHED Published: 2011-08-04T01:00:00 Last Updated: 2024-08-06T21:51:07.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted pict file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15755
CVE ID: CVE-2011-0246 State: PUBLISHED Published: 2011-08-04T01:00:00 Last Updated: 2024-08-06T21:51:07.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted GIF file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15681 - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html
CVE ID: CVE-2011-0247 State: PUBLISHED Published: 2011-08-04T01:00:00 Last Updated: 2024-08-06T21:51:07.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Apple QuickTime before 7.7 on Windows allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted H.264 movie. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16186
CVE ID: CVE-2011-0248 State: PUBLISHED Published: 2011-08-04T01:00:00Z Last Updated: 2024-09-16T19:31:50.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html
CVE ID: CVE-2011-0249 State: PUBLISHED Published: 2011-08-04T01:00:00 Last Updated: 2024-08-06T21:51:07.452Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSC atoms in a QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
003.html - http://support.apple.com/kb/HT5002 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16089
CVE ID: CVE-2011-0250 State: PUBLISHED Published: 2011-08-04T01:00:00 Last Updated: 2024-08-06T21:51:07.273Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSS atoms in a QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitr
003.html - http://support.apple.com/kb/HT5002 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15885
CVE ID: CVE-2011-0251 State: PUBLISHED Published: 2011-08-04T01:00:00 Last Updated: 2024-08-06T21:51:07.809Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSZ atoms in a QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16143 - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support
nce/2011//Aug/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002
CVE ID: CVE-2011-0252 State: PUBLISHED Published: 2011-08-04T01:00:00 Last Updated: 2024-08-06T21:51:07.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STTS atoms in a QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/security-announce/2011//Aug/msg00000.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15884 - http://support
003.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15884 - http://support.apple.com/kb/HT5002
CVE ID: CVE-2011-0253 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://support.apple.com/kb/HT4808 - http://lists.apple.com/archives/security-ann
CVE ID: CVE-2011-0254 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.644Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0255 State: PUBLISHED Published: 2011-07-21T23:00:00 Last Updated: 2024-08-06T21:51:07.658Z Vendors: n/a Products: n/a Problem Types: n/a Description: WebKit, as used in Apple Safari before 5.0.6, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2011-07-20-1. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http:
CVE ID: CVE-2011-0256 State: PUBLISHED Published: 2011-08-15T21:00:00 Last Updated: 2024-08-06T21:51:07.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted track run atoms in a QuickTime movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4826 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16097
CVE ID: CVE-2011-0257 State: PUBLISHED Published: 2011-08-15T21:00:00 Last Updated: 2024-08-06T21:51:08.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer signedness error in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PnSize opcode in a PICT file that triggers a stack-based buffer overflow. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4826 - http://securityreason.com/securityalert/8365 - http://www.exploit-db.com/exploits/17777 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16059 - htt
.com/exploits/17777 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16059 - http://zerodayinitiative.com/advisories/ZDI-11-252/
CVE ID: CVE-2011-0258 State: PUBLISHED Published: 2011-09-06T15:00:00 Last Updated: 2024-08-06T21:51:07.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associated with an mp4v tag in a movie file. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4826 - http://securityreason.com/securityalert/8368 - http://www.securityfocus.com/archive/1/519483/100/0/threaded - http://zerodayinitiative.com/advisories/ZDI-11-277/ - https://oval.cisecurity.org/re
m/archive/1/519483/100/0/threaded - http://zerodayinitiative.com/advisories/ZDI-11-277/ - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15671 - https://exchange.xforce.ibmcloud.com/vulnerabilities/69518
CVE ID: CVE-2011-0259 State: PUBLISHED Published: 2011-10-12T18:00:00 Last Updated: 2024-08-06T21:51:07.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://support.apple.com/kb/HT4981 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://www.secu
ce/2011//Oct/msg00001.html - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00000.html - http://www.securityfocus.com/bid/50067 - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT4999 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16919 - http://support.apple.com/kb/HT5002
CVE ID: CVE-2011-0260 State: PUBLISHED Published: 2011-10-14T10:00:00 Last Updated: 2024-08-06T21:51:07.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystrokes in the locked-screen state, which might allow physically proximate attackers to bypass intended access restrictions by typing into this window. Additional Analyst Notes: - CVE Program Container: References: - http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html - http://support.apple.com/kb/HT5002 - http://www.securityfocus.com/bid/50085