CVE-2006-1444 Security feature bypass in n/a
Local attackers can bypass secure event input restrictions to read events from other applications when assistive devices are enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-1444?
CVE-2006-1444 is a low-severity vulnerability in Apple Mac Os X, published on 12 May 2006. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services.
Which versions are affected by CVE-2006-1444?
It affects 1 product.
Products include Apple Mac Os X.
How do I fix CVE-2006-1444?
No fix has been published for CVE-2006-1444 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-1444 being exploited?
There is no known exploitation of CVE-2006-1444 in the wild and no public exploit code.
Other vulnerabilities in Apple Mac Os X
Sources
Also known as GHSA-pmxg-qpwm-87cr.