CVE-2011-3224
The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates...
The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
Exploit likelihood
What each source reports
NVD Score used
The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
- Record
CVE-2011-3224- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
- Record
CVE-2011-3224- Updated
- 2026-11-02
EUVDEUVD-2011-3188 No score
The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
- Record
EUVD-2011-3188- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r83g-q654-9mvf No score
The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates...
The User Documentation component in Apple Mac OS X through 10.6.8 uses http sessions for updates to App Store help information, which allows man-in-the-middle attackers to execute arbitrary code by spoofing the http server.
- Record
GHSA-r83g-q654-9mvf- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3224 is a low vulnerability (CVSS 2.6) in Apple Mac Os X, published October 14, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.76%, the 78th percentile. No source names a fixed version.