Description
The Dictionary app in Apple OS X before 10.10.5 does not use HTTPS, which allows man-in-the-middle attackers to obtain sensitive information by sniffing the network or spoof word definitions by modifying the client-server data stream.
References
- 76340 vdb-entry
- APPLE-SA-2015-08-13-2 vendor-advisory
- https://support.apple.com/kb/HT205031
- 1033276 vdb-entry