CVE-2011-0260 in Mac OS X

Summary

The CoreProcesses component in Apple Mac OS X 10.7 before 10.7.2 does not prevent a system window from receiving keystrokes in the locked-screen state, which might allow physically proximate attackers to bypass intended access restrictions by typing into this window.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 12/23/2010
• Disclosure: 10/14/2011
• Moderation: VulDB entry created
• Entries: VDB-59040 (1)
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 5.9
• EPSS: 0.00065
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-0260
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-0260
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-0260/