VDB
GHSA-3g7h-7745-2cmg
GHSA-3g7h-7745-2cmg
PUBLISHED
CVSS 7.5 HIGH
Record from GitHub Advisory Database · Published May 2, 2022
iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network.
Risk scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Timeline
- May 2, 2022 CVE Published
- Apr 9, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln GHSA-3g7h-7745-2cmg
vulnetix vdb fixes GHSA-3g7h-7745-2cmg
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/GHSA-3g7h-7745-2cmg/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- http://www.securitytracker.com/id?1022212 url
- http://www.vupen.com/english/advisories/2009/1297 url
- https://nvd.nist.gov/vuln/detail/CVE-2009-0152 advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50487 url
- http://www.securityfocus.com/bid/34926 url
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html url
- http://secunia.com/advisories/35074 url
- http://support.apple.com/kb/HT3549 url
- http://www.us-cert.gov/cas/techalerts/TA09-133A.html url