CVE-2011-0190: Apple Installer

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Install Helper in Installer in Apple Mac OS X before 10.6.7 does not properly process an unspecified URL, which might allow remote attackers to track user logins by logging network traffic from an agent that was intended to send network traffic to an Apple server.

Affected products

• Apple Installer: any version
• Apple Mac OS X: version 10.6.0 only; version 10.6.1 only; version 10.6.2 only; version 10.6.3 only; version 10.6.4 only; version 10.6.5 only; …
• Apple Mac OS X Server: version 10.6.0 only; version 10.6.1 only; version 10.6.2 only; version 10.6.3 only; version 10.6.4 only; version 10.6.5 only; …

Published 2011-03-23. Last modified 2026-06-16.