Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.8.0 (including) | 10.8.0 (including) |
| Mac_os_x | Apple | 10.8.1 (including) | 10.8.1 (including) |
| Mac_os_x | Apple | 10.8.2 (including) | 10.8.2 (including) |