PT-2006-2452 · Apple · Macos X

Damien Bobillot · Published 2006-05-12 · Updated 2017-07-20 · CVE-2006-1444

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple Mac OS X version 10.4.6

Description The issue allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services, but only when "Enable access for assistive devices" is on.

Recommendations For Apple Mac OS X version 10.4.6, consider disabling the "Enable access for assistive devices" option to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-1444

Affected Products

Macos X

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-1444 · Security Note
• http://lists.apple.com/archives/security-announce/2006/May/msg00003.html · Patch, Vendor Advisory
• http://securityfocus.com/bid/17951 · Note
• http://us-cert.gov/cas/techalerts/TA06-132A.html · Note
• http://secunia.com/advisories/20077 · Note
• http://osvdb.org/25588 · Note
• http://securitytracker.com/id?1016079 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26409 · Note
• http://vupen.com/english/advisories/2006/1779 · Note