PT-2013-2762 · Apple · Macos X
Eric A. Schulman
·
Published
2013-03-15
·
Updated
2013-03-18
·
CVE-2013-0969
CVSS v2.0
4.9
Medium
| Vector | AV:L/AC:L/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
Apple Mac OS X versions prior to 10.8.3
Description
The issue allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes. This is possible due to the Login Window not preventing application launching with the VoiceOver feature.
Recommendations
For Apple Mac OS X versions prior to 10.8.3, update to version 10.8.3 or later to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Macos X