PT-2006-2447 · Apple · Appkit+1

Publicado 2006-05-12 · Atualizado 2017-07-20 · CVE-2006-1439

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions AppKit in Apple Mac OS X version 10.4.6

Description The issue concerns NSSecureTextField in AppKit, which fails to re-enable secure event input under certain circumstances. This could allow other applications in the same window session to monitor input characters and keyboard events.

Recommendations For AppKit in Apple Mac OS X version 10.4.6, consider applying configuration changes to restrict access to sensitive input fields until a fix is available. As a temporary workaround, avoid using NSSecureTextField in applications where secure input is crucial, to minimize the risk of input character and keyboard event monitoring.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2006-1439

Produtos afetados

Appkit

Macos X

Referências · 8

• https://exchange.xforce.ibmcloud.com/vulnerabilities/26404 · Nota
• http://secunia.com/advisories/20077 · Aviso do Fabricante
• http://osvdb.org/25583 · Nota
• http://securityfocus.com/bid/17951 · Nota
• http://vupen.com/english/advisories/2006/1779 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-1439 · Nota de Segurança
• http://us-cert.gov/cas/techalerts/TA06-132A.html · Nota
• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Aviso do Fabricante