CVE-2010-0525

CVE-2010-0525 describes a vulnerability in Apple Mac OS X Mail versions prior to 10.6.3. The flaw involves improper enforcement of the key usage extension when processing keychains with multiple certificates for an email recipient. This weakness could allow remote attackers to conduct brute-force attacks on weakly encrypted email messages, potentially leading to the disclosure of sensitive information. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is a network-based attack with low attack complexity, requiring no authentication, and primarily impacts confidentiality (C:P) without affecting integrity or availability. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.