CVE-2012-3718

macOS < 10.7.5 and 10.8.x < 10.8.2 - Unauthorized Password Exposure via Input Method Keystroke Interception

Title source: llm
STIX 2.1

Description

Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.

References (3)

Core 3
Core References
Vendor Advisory vendor-advisory x_refsource_apple
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html
Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT5501
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/85647

Scores

EPSS 0.0031
EPSS Percentile 22.5%

Details

CWE
CWE-200
Status published
Products (50)
apple/mac_os_x 10.0
apple/mac_os_x 10.0.0
apple/mac_os_x 10.0.1
apple/mac_os_x 10.0.2
apple/mac_os_x 10.0.3
apple/mac_os_x 10.0.4
apple/mac_os_x 10.1
apple/mac_os_x 10.1.0
apple/mac_os_x 10.1.1
apple/mac_os_x 10.1.2
... and 40 more
Published Sep 20, 2012
Tracked Since Feb 18, 2026