CVE-2011-0178 in Mac OS X

Riassunto

di MITRE

The FSFindFolder API in CarbonCore in Apple Mac OS X before 10.6.7 provides a world-readable directory in response to a call with the kTemporaryFolderType flag, which allows local users to obtain potentially sensitive information by accessing this directory.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 23/12/2010
• Divulgazione: 22/03/2011
• Moderazione: accettato
• Voce: VDB-56918
• CPE: pronto
• CWE: CWE-200 (confermato)
• Sfruttamento: Scaricare
• CVSS: 2.1 (NVD)
• EPSS: 0.00333
• KEV: no
• Attività: molto basso
• Settore: Homeoffice, Industry, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0178
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0178
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0178/