The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Apple events to the launchd daemon, a related issue to CVE-2008-7303.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2011-11-15T18:00:00
Updated: 2024-08-06T22:28:41.887Z
Reserved: 2011-03-23T00:00:00
Link: CVE-2011-1516
Vulnrichment
No data.
NVD
Status : Modified
Published: 2011-11-15T18:55:01.637
Modified: 2018-10-09T19:31:06.410
Link: CVE-2011-1516
Redhat
No data.