CVE-2011-1516

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5.x through 10.7.x

Description The issue concerns the kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles, which fail to propagate restrictions to all created processes. This allows remote attackers to access network resources by using a crafted application. For example, an attacker can use osascript to send Apple events to the launchd daemon.

Recommendations For Mac OS X versions 10.5.x through 10.7.x, consider restricting access to the launchd daemon and limiting the use of osascript to send Apple events as a temporary workaround until a patch is available.