Description
CoreGraphics in Apple Mac OS X 10.4.6, when "Enable access for assistive devices" is on, allows an application to bypass restrictions for secure event input and read certain events from other applications in the same window session by using Quartz Event Services.
References
- 17951 vdb-entry
- ADV-2006-1779 vdb-entry
- TA06-132A third-party-advisory
- 1016079 vdb-entry
- 25588 vdb-entry
- macos-coregraphics-quartz-security-bypass(26409) vdb-entry
- APPLE-SA-2006-05-11 vendor-advisory
- 20077 third-party-advisory