CVE-2006-1444

CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services.

CVSS v2.0 2.1 LOW

2.1^/10

CVSS v2.0 : LOW

Vector : AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://lists.apple.com/archives/security-announce/2006/May/msg00003.html	Patch
http://secunia.com/advisories/20077
http://securitytracker.com/id?1016079
http://www.osvdb.org/25588
http://www.securityfocus.com/bid/17951
http://www.us-cert.gov/cas/techalerts/TA06-132A.html	US Government Resource
http://www.vupen.com/english/advisories/2006/1779
https://exchange.xforce.ibmcloud.com/vulnerabilities/26409

Configurations

Configuration 1 (hide)

cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-05-12 21:02

Updated : 2023-12-10 10:28

NVD link : CVE-2006-1444

Mitre link : CVE-2006-1444

CVE.ORG link : CVE-2006-1444

JSON object : View

Products Affected

apple

mac_os_x

CWE

NVD-CWE-Other

{"id": "CVE-2006-1444", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-05-12T21:02:00.000", "references": [{"url": "http://lists.apple.com/archives/security-announce/2006/May/msg00003.html", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/20077", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016079", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/25588", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/17951", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA06-132A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/1779", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26409", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "CoreGraphics in Apple Mac OS X 10.4.6, when \"Enable access for assistive devices\" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services."}], "lastModified": "2017-07-20T01:30:36.113", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB0F2132-8431-4CEF-9A3D-A69425E3834E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org", "evaluatorSolution": "Successful exploitation requires that \"Enable access for assistive devices\" is on.\r\nThis vulnerability is addressed in the following product release:\r\nApple, Mac OS X, 10.4.6 (2006-003)"}