Description
Apple Mac OS X does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Unscored
CVE-2008-3438
EUVD-2008-3424GHSA-c99v-pf2h-3c56
Apple Mac OS X does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via…
Published Aug 1, 2008 · Updated Sep 16, 2024 · Assigned by mitre