CVE-2011-3444: Apple Mac OS X

Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days.

Address Book in Apple Mac OS X before 10.7.3 automatically switches to unencrypted sessions upon failure of encrypted connections, which allows remote attackers to read CardDAV data by terminating an encrypted connection and then sniffing the network.

Affected products

• Apple Mac OS X: up to and including 10.7.2; version 10.7.0 only; version 10.7.1 only
• Apple Mac OS X Server: up to and including 10.7.2; version 10.7.0 only; version 10.7.1 only

Published 2012-02-02. Last modified 2026-06-16.