{"api_version":"1","generated_at":"2026-07-23T03:24:52+00:00","cve":"CVE-2011-0190","urls":{"html":"https://cve.report/CVE-2011-0190","api":"https://cve.report/api/cve/CVE-2011-0190.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-0190","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-0190"},"summary":{"title":"CVE-2011-0190","description":"Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.","state":"PUBLISHED","assigner":"apple","published_at":"2011-03-23 02:00:06","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","name":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"APPLE-SA-2011-03-21-1 Mac OS X v10.6.7 and Security Update 2011-001","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://support.apple.com/kb/HT4581","name":"http://support.apple.com/kb/HT4581","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"About the security content of Mac OS X v10.6.7 and Security Update 2011-001","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0190","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0190","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"190","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"apple","cpe5":"installer","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"190","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"190","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"190","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"190","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"190","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"190","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"190","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"o","cpe4":"apple","cpe5":"mac_os_x","cpe6":"10.6.6","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T21:43:15.358Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"APPLE-SA-2011-03-21-1","tags":["vendor-advisory","x_refsource_APPLE","x_transferred"],"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.apple.com/kb/HT4581"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-03-23T01:00:00.000Z","orgId":"286789f9-fbc2-4510-9f9a-43facdede74c","shortName":"apple"},"references":[{"name":"APPLE-SA-2011-03-21-1","tags":["vendor-advisory","x_refsource_APPLE"],"url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.apple.com/kb/HT4581"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"product-security@apple.com","ID":"CVE-2011-0190","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"APPLE-SA-2011-03-21-1","refsource":"APPLE","url":"http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html"},{"name":"http://support.apple.com/kb/HT4581","refsource":"CONFIRM","url":"http://support.apple.com/kb/HT4581"}]}}}},"cveMetadata":{"assignerOrgId":"286789f9-fbc2-4510-9f9a-43facdede74c","assignerShortName":"apple","cveId":"CVE-2011-0190","datePublished":"2011-03-23T01:00:00.000Z","dateReserved":"2010-12-23T00:00:00.000Z","dateUpdated":"2024-09-17T03:23:22.213Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-03-23 02:00:06","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:installer:*:*:*:*:*:*:*:*","matchCriteriaId":"036F0E13-91CB-4C5E-A5C3-6EEAE787EF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*","matchCriteriaId":"3C69DEE9-3FA5-408E-AD27-F5E7043F852A"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"D25D1FD3-C291-492C-83A7-0AFAFAADC98D"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*","matchCriteriaId":"5B565F77-C310-4B83-B098-22F9489C226C"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*","matchCriteriaId":"546EBFC8-79F0-42C2-9B9A-A76CA3F19470"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*","matchCriteriaId":"119C8089-8C98-472E-9E9C-1741AA21DD35"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.5:*:*:*:*:*:*:*","matchCriteriaId":"831C5105-6409-4743-8FB5-A91D8956202F"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x:10.6.6:*:*:*:*:*:*:*","matchCriteriaId":"0B63D169-E2AA-4315-891F-B4AF99F2753C"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:apple:installer:*:*:*:*:*:*:*:*","matchCriteriaId":"036F0E13-91CB-4C5E-A5C3-6EEAE787EF7E"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*","matchCriteriaId":"26E34E35-CCE9-42BE-9AFF-561D8AA90E25"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*","matchCriteriaId":"A04FF6EE-D4DA-4D70-B0CE-154292828531"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*","matchCriteriaId":"9425320F-D119-49EB-9265-3159070DFE93"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*","matchCriteriaId":"F6BE138D-619B-4E44-BFB2-8DFE5F0D1E12"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.4:*:*:*:*:*:*:*","matchCriteriaId":"EF0D1051-F850-4A02-ABA0-968E1336A518"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.5:*:*:*:*:*:*:*","matchCriteriaId":"A1C9705A-74D4-43BA-A119-C667678F9A15"},{"vulnerable":true,"criteria":"cpe:2.3:o:apple:mac_os_x_server:10.6.6:*:*:*:*:*:*:*","matchCriteriaId":"4BBF5FE5-4B25-47BE-8D9D-F228746408EC"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"190","Ordinal":"1","Title":"CVE-2011-0190","CVE":"CVE-2011-0190","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"190","Ordinal":"1","NoteData":"Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.","Type":"Description","Title":"CVE-2011-0190"},{"CveYear":"2011","CveId":"190","Ordinal":"2","NoteData":"2011-03-22","Type":"Other","Title":"Published"}]}}}