The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the screen-lock protection mechanism, and enter characters into an arbitrary window under the lock window, via keyboard input.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.9 (including) | 10.9 (including) |
| Mac_os_x | Apple | 10.9.1 (including) | 10.9.1 (including) |
| Mac_os_x | Apple | 10.9.2 (including) | 10.9.2 (including) |
| Mac_os_x | Apple | 10.9.3 (including) | 10.9.3 (including) |