CVE-2013-0973

CVE-2013-0973 describes a vulnerability in Apple Mac OS X through version 10.7.5, where the Software Update component failed to restrict plugin loading within its marketing-text WebView. This flaw allowed man-in-the-middle attackers to execute arbitrary plugin code by intercepting and modifying the client-server data stream. With a CVSS score of 6.8, this vulnerability is of medium severity, requiring medium attack complexity (AC:M) but allowing for potential partial compromise of confidentiality, integrity, and availability (C:P/I:P/A:P). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, indicating low community attention and exploitation risk.