CVE-2009-2808

Published Nov 10, 2009

Last updated 15 years ago

Overview

Description
Help Viewer in Apple Mac OS X before 10.6.2 does not use an HTTPS connection to retrieve Apple Help content from a web site, which allows man-in-the-middle attackers to send a crafted help:runscript link, and thereby execute arbitrary code, via a spoofed response.
Source
cve@mitre.org
NVD status
Modified

Social media

Hype score
Not currently trending

Risk scores

CVSS 2.0

Type
Primary
Base score
5.4
Impact score
6.4
Exploitability score
5.5
Vector string
AV:A/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov
CWE-310

Evaluator

Comment
-
Impact
Per: http://support.apple.com/kb/HT3937 * Help Viewer CVE-ID: CVE-2009-2808 Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 and v10.6.1, Mac OS X Server v10.6 and v10.6.1 Impact: Using Help Viewer on an untrusted network may result in arbitrary code execution Description: Help Viewer does not use HTTPS for viewing remote Apple Help content. A user on the local network may send spoofed HTTP responses containing malicious help:runscript links. This update addresses the issue by using HTTPS when requesting remote Apple Help content. Credit to Brian Mastenbrook for reporting this issue.
Solution
Per: http://support.apple.com/kb/HT3937 * Help Viewer CVE-ID: CVE-2009-2808 Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Mac OS X v10.6 and v10.6.1, Mac OS X Server v10.6 and v10.6.1 Impact: Using Help Viewer on an untrusted network may result in arbitrary code execution Description: Help Viewer does not use HTTPS for viewing remote Apple Help content. A user on the local network may send spoofed HTTP responses containing malicious help:runscript links. This update addresses the issue by using HTTPS when requesting remote Apple Help content. Credit to Brian Mastenbrook for reporting this issue.

Configurations