The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystrokes in the locked-screen state, which might allow physically proximate attackers to bypass intended access restrictions by typing into this window.
CPE | Name | Operator | Version |
---|---|---|---|
mac_os_x | eq | 10.7.0 | |
mac_os_x | eq | 10.7.1 | |
mac_os_x_server | eq | 10.7.1 | |
mac_os_x_server | eq | 10.7.0 |