CVE-2013-0969

2013-03-1520:55:10

CWE-264

apple

web.nvd.nist.gov

apple

mac os x

authentication bypass

vulnerability

nvd

cve-2013-0969

CVSS2

4.9

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:C/A:N

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

26.3%

JSON

Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard.

Affected configurations

Nvd

Node

applemac_os_xMatch10.8.0

applemac_os_xMatch10.8.1

applemac_os_xMatch10.8.2

VendorProductVersionCPE
applemac_os_x10.8.0cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*
applemac_os_x10.8.1cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*
applemac_os_x10.8.2cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.8.0	cpe:2.3:o:apple:mac_os_x:10.8.0:::::::*
apple	mac_os_x	10.8.1	cpe:2.3:o:apple:mac_os_x:10.8.1:::::::*
apple	mac_os_x	10.8.2	cpe:2.3:o:apple:mac_os_x:10.8.2:::::::*