Vulnerability in Apple Mac OS X

CVE-2013-0973

Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream.

EPSS: 0.012 (64.1th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x — versions 10.6.8, 10.7.0, 10.7.1
Apple Mac_os_x_server — versions 10.6.8, 10.7.0, 10.7.1
N/a — versions n/a

References

product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)