CVE-2013-0969

Published: Mar 15, 2013Modified: Apr 29, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:C/A:N

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard.

Affected (3)

Products: Apple: Mac Os X

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Apple Mac Os X	Version 10.8.0
Apple Mac Os X	Version 10.8.1
Apple Mac Os X	Version 10.8.2

Related CWEs

References (2)

http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html

Source: product-security@apple.com

Vendor Advisory

http://lists.apple.com/archives/security-announce/2013/Mar/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.