PT-2006-2452 · Apple · Macos X

Damien Bobillot · Publicado 2006-05-12 · Atualizado 2017-07-20 · CVE-2006-1444

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.4.6

Description The issue allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services, but only when "Enable access for assistive devices" is on.

Recommendations For Apple Mac OS X version 10.4.6, consider disabling the "Enable access for assistive devices" option to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-1444

Produtos afetados

Macos X

Referências · 9

• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Correção, Aviso do Fabricante
• http://securityfocus.com/bid/17951 · Nota
• http://us-cert.gov/cas/techalerts/TA06-132A.html · Nota
• http://secunia.com/advisories/20077 · Nota
• http://osvdb.org/25588 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1444 · Nota de Segurança
• http://securitytracker.com/id?1016079 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26409 · Nota
• http://vupen.com/english/advisories/2006/1779 · Nota