Vulnerability Database

289,871

Total vulnerabilities in the database

CVE-2011-1516

The kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles in Apple Mac OS X 10.5.x through 10.7.x do not propagate restrictions to all created processes, which allows remote attackers to access network resources via a crafted application, as demonstrated by use of osascript to send Apple events to the launchd daemon, a related issue to CVE-2008-7303.

  • Published: Nov 15, 2011
  • Updated: Apr 13, 2023
  • CVE: CVE-2011-1516
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.6
  • AV:N/AC:H/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
apple / mac_os_x 10.5.8 10.5.8.x
apple / mac_os_x 10.6.8 10.6.8.x
apple / mac_os_x 10.6.7 10.6.7.x
apple / mac_os_x 10.5.6 10.5.6.x
apple / mac_os_x 10.5.5 10.5.5.x
apple / mac_os_x 10.6.3 10.6.3.x
apple / mac_os_x 10.5.1 10.5.1.x
apple / mac_os_x 10.7.2 10.7.2.x
apple / mac_os_x 10.5.3 10.5.3.x
apple / mac_os_x 10.5.0 10.5.0.x
apple / mac_os_x 10.6.6 10.6.6.x
apple / mac_os_x 10.5.2 10.5.2.x
apple / mac_os_x 10.6.1 10.6.1.x
apple / mac_os_x 10.6.0 10.6.0.x
apple / mac_os_x 10.5.7 10.5.7.x
apple / mac_os_x 10.6.2 10.6.2.x
apple / mac_os_x 10.7.0 10.7.0.x
apple / mac_os_x 10.6.4 10.6.4.x
apple / mac_os_x 10.6.5 10.6.5.x
apple / mac_os_x 10.5.4 10.5.4.x
apple / mac_os_x 10.7.1 10.7.1.x