Apple Mac OS X contains a flaw that may lead to an unauthorized information disclosure. The issue may allow a local attacker to gain access to passwords by installing an input method that may intercept keystrokes to the LoginWindow or Screen Saver Unlock.
Classification
Location:
Local Access Required
Attack Type:
Information Disclosure
Impact:
Loss of Confidentiality
Solution:
Patch / RCS,
Upgrade
Exploit:
Exploit Private
Disclosure:
Vendor Verified,
Coordinated Disclosure
OSVDB:
Authentication Required
Solution
Upgrade to version 10.8.2 or 10.7.5 or higher, as they have been reported to fix this vulnerability. In addition, Apple has released a patch for some older versions.
