CVE-2006-1444
En bref
- Source
- NVD
- EPSS
- EPSS 0.39 % · centile 33 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- mitre
- Statut NVD
- Modified
Description
CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services.
Références
- http://www.securityfocus.com/bid/17951
- http://www.vupen.com/english/advisories/2006/1779
- http://www.us-cert.gov/cas/techalerts/TA06-132A.html
- http://securitytracker.com/id?1016079
- http://www.osvdb.org/25588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26409
- http://lists.apple.com/archives/security-announce/2006/May/msg00003.html
- http://secunia.com/advisories/20077
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 2.0 | LOW 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N | NVD · nvd@nist.gov (Primary) |
Références européennes
- ENISA EUVD · EUVD-2006-1448
- GCVE · GCVE-0-2006-1444
Avis du CERT-FR
- CERTA-2006-AVI-195 — Multiples vulnérabilités sous Mac OS X · cert.ssi.gouv.fr
Configurations affectées (CPE NVD)
cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*
Produits affectés
| Produit | Versions |
|---|---|
| affected n/a |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |