CVE-2006-1439

Published: May 12, 2006Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

NSSecureTextField in AppKit in Apple Mac OS X 10.4.6 does not re-enable secure event input under certain circumstances, which could allow other applications in the window session to monitor input characters and keyboard events.

Affected (1)

Products: Apple: Mac Os X

Apple

1 product

Mac Os X

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.4.6

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (14)

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/20077

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/25583

Source: cve@mitre.org

http://www.securityfocus.com/bid/17951

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA06-132A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1779

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/26404

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2006/May/msg00003.html