CVE detail
CVE-2012-0655 — CVE-2012-0655
Published 2012-05-11 · Modified 2026-06-16 · Vendor apple · Product mac_os_x · Source nvd
UNKNOWN
severity
CVSS-derived band
0.0120
EPSS probability
exploitation probability, 30d
65.0%
EPSS percentile
percentile vs all CVEs
NOT LISTED
CISA KEV
known exploited catalog
Description
libsecurity in Apple Mac OS X before 10.7.4 does not properly restrict the length of RSA keys within X.509 certificates, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by conducting a spoofing or network-sniffing attack during communication with a site that uses a short key.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References