Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.
References
Link | Resource |
---|---|
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html | Vendor Advisory |
http://osvdb.org/85647 | |
http://support.apple.com/kb/HT5501 | Vendor Advisory |
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html | Vendor Advisory |
http://osvdb.org/85647 | |
http://support.apple.com/kb/HT5501 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 01:41
Type | Values Removed | Values Added |
---|---|---|
References | () http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - Vendor Advisory | |
References | () http://osvdb.org/85647 - | |
References | () http://support.apple.com/kb/HT5501 - Vendor Advisory |
Information
Published : 2012-09-20 21:55
Updated : 2024-11-21 01:41
NVD link : CVE-2012-3718
Mitre link : CVE-2012-3718
CVE.ORG link : CVE-2012-3718
JSON object : View
Products Affected
apple
- mac_os_x_server
- mac_os_x
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor