Information disclosure in Apple Mac OS X

CVE-2012-3718

Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.

Vulnerability class: Information Disclosure

EPSS: 0.003 (23.0th percentile) — read the EPSS interpretation.

Affected products

Apple Mac_os_x — versions 10.0, 10.0.0, 10.0.1
Apple Mac_os_x_server — versions 10.0, 10.0.0, 10.0.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

product-security@apple.com (vendor-advisory, x_refsource_APPLE, Vendor Advisory)
product-security@apple.com (x_refsource_CONFIRM, Vendor Advisory)
product-security@apple.com (x_refsource_OSVDB, vdb-entry)