Vulnerability Details CVE-2011-3447
CFNetwork in Apple Mac OS X 10.7.x before 10.7.3 does not properly construct request headers during parsing of URLs, which allows remote attackers to obtain sensitive information via a malformed URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.7%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2011-3447
-
cpe:2.3:o:apple:mac_os_x:10.7.0
-
cpe:2.3:o:apple:mac_os_x:10.7.1
-
cpe:2.3:o:apple:mac_os_x:10.7.2
-
cpe:2.3:o:apple:mac_os_x_server:10.7.0
-
cpe:2.3:o:apple:mac_os_x_server:10.7.1
-
cpe:2.3:o:apple:mac_os_x_server:10.7.2