CVE-2011-3215
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-3215
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The kernel in Apple Mac OS X before 10.7.2 does not properly prevent FireWire DMA in the absence of a login, which allows physically proximate attackers to bypass intended access restrictions and discover a password by making a DMA request in the (1) loginwindow, (2) boot, or (3) shutdown state.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Apple Mac OS X ‘FireWire DMA’ 权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Apple Mac OS X是美国苹果（Apple）公司为Mac计算机所开发的一套专用操作系统。 Apple Mac OS X 10.7.2之前版本中存在权限许可和访问控制漏洞。由于kernel在没有登录时不能准确阻止FireWire DMA，本地攻击者可通过制作(1)登录窗口，(2)引导，或者(3)关机状态中的DMA请求绕过预期的访问限制发现密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-3215
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-3215
Please Login to view more intelligence information
- http://support.apple.com/kb/HT5002x_refsource_CONFIRM
- http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.htmlvendor-advisoryx_refsource_APPLE
- https://nvd.nist.gov/vuln/detail/CVE-2011-3215
Same Patch Batch · n/a · 2011-10-14 · 47 CVEs total
| CVE-2011-3259 | Apple iOS/TV 资源管理错误漏洞 | |
| CVE-2011-3426 | Apple iOS ‘Safari’ 跨站脚本攻击漏洞 | |
| CVE-2011-3429 | Apple iOS Settings组件信任管理漏洞 | |
| CVE-2011-3432 | Apple iOS UIKit Alerts组件资源管理错误漏洞 | |
| CVE-2011-3434 | Apple iOS WiFi组件信任管理漏洞 | |
| CVE-2011-3435 | Apple Mac OS‘Open Directory’信任管理漏洞 | |
| CVE-2011-3436 | Apple Mac OS X‘Open Directory’权限许可和访问控制漏洞 | |
| CVE-2011-3437 | Apple Mac OS X‘Apple Type Services’数字错误漏洞 | |
| CVE-2011-3431 | Apple iOS Home screen组件信息泄露漏洞 | |
| CVE-2011-3260 | Apple Mobile OfficeImport Framework Word文档解析内存破坏漏洞 | |
| CVE-2011-3261 | Apple iOS ‘OfficeImport’ 代码注入漏洞 | |
| CVE-2011-3257 | Apple iOS ‘Data Access’ 组件权限许可和访问控制漏洞 | |
| CVE-2011-3256 | Apple iOS ‘FreeType’ 代码注入漏洞 | |
| CVE-2011-3255 | Apple iOS CFNetwork 信任管理漏洞 | |
| CVE-2011-3254 | Apple iOS Calendar 跨站脚本攻击漏洞 | |
| CVE-2011-3253 | Apple iOS CalDAV 信息泄露漏洞 | |
| CVE-2011-3246 | Apple iOS CFNetwork 信息泄露漏洞 | |
| CVE-2011-3245 | Apple iOS Keyboards组件信任管理漏洞 | |
| CVE-2011-3243 | Apple iOS Safari 跨站脚本攻击漏洞 | |
| CVE-2011-3242 | Apple Safari Mac OS X平台信息泄露漏洞 |
Showing top 20 of 47 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8196
JeecgBoot mLogin Endpoint LoginController.java authorization - CVE-2026-8195
JeecgBoot SVG File CommonController.java cross site scriptin - CVE-2026-8194
osTicket Dispatcher class.dispatcher.php cross-site request - CVE-2026-8193
Akaunting Invoice PDF Rendering dompdf.php server-side reque - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out-
V. Comments for CVE-2011-3215
No comments yet