CVE-2012-3718
UnknownEPSS 0.31%
Last modified
CVE-2012-3718 is a vulnerability of currently unknown severity. Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Mac Os X | <= 10.7.4 |
| Apple | Mac Os X | 10.0 |
| Apple | Mac Os X | 10.0.0 |
| Apple | Mac Os X | 10.0.1 |
| Apple | Mac Os X | 10.0.2 |
| Apple | Mac Os X | 10.0.3 |
| Apple | Mac Os X | 10.0.4 |
| Apple | Mac Os X | 10.1 |
| Apple | Mac Os X | 10.1.0 |
| Apple | Mac Os X | 10.1.1 |
| Apple | Mac Os X | 10.1.2 |
| Apple | Mac Os X | 10.1.3 |
| Apple | Mac Os X | 10.1.4 |
| Apple | Mac Os X | 10.1.5 |
| Apple | Mac Os X | 10.2 |
| Apple | Mac Os X | 10.2.0 |
| Apple | Mac Os X | 10.2.1 |
| Apple | Mac Os X | 10.2.2 |
| Apple | Mac Os X | 10.2.3 |
| Apple | Mac Os X | 10.2.4 |
| Apple | Mac Os X | 10.2.5 |
| Apple | Mac Os X | 10.2.6 |
| Apple | Mac Os X | 10.2.7 |
| Apple | Mac Os X | 10.2.8 |
| Apple | Mac Os X | 10.3 |
| Apple | Mac Os X | 10.3.0 |
| Apple | Mac Os X | 10.3.1 |
| Apple | Mac Os X | 10.3.2 |
| Apple | Mac Os X | 10.3.3 |
| Apple | Mac Os X | 10.3.4 |
| Apple | Mac Os X | 10.3.5 |
| Apple | Mac Os X | 10.3.6 |
| Apple | Mac Os X | 10.3.7 |
| Apple | Mac Os X | 10.3.8 |
| Apple | Mac Os X | 10.3.9 |
| Apple | Mac Os X | 10.4 |
| Apple | Mac Os X | 10.4.0 |
| Apple | Mac Os X | 10.4.1 |
| Apple | Mac Os X | 10.4.2 |
| Apple | Mac Os X | 10.4.3 |
| Apple | Mac Os X | 10.4.4 |
| Apple | Mac Os X | 10.4.5 |
| Apple | Mac Os X | 10.4.6 |
| Apple | Mac Os X | 10.4.7 |
| Apple | Mac Os X | 10.4.8 |
| Apple | Mac Os X | 10.4.9 |
| Apple | Mac Os X | 10.4.10 |
| Apple | Mac Os X | 10.4.11 |
| Apple | Mac Os X | 10.5 |
| Apple | Mac Os X | 10.5.0 |
Showing 50 of 144 affected configurations. See NVD for the full list.
References
- http://support.apple.com/kb/HT5501Vendor Advisory
- http://support.apple.com/kb/HT5501Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-3718?
Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window (aka LoginWindow) or Screen Saver Unlock by installing an input method that intercepts keystrokes.
How severe is CVE-2012-3718?
Severity scoring for CVE-2012-3718 is pending analysis. The EPSS model estimates a 0.31% probability of exploitation in the next 30 days.
How do I fix CVE-2012-3718?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-3712WebKit, as used in Apple iTunes before 10.7, allows remote a…
- CVE-2012-3713Apple Safari before 6.0.1 does not properly handle the Quara…
- CVE-2012-3714The Form Autofill feature in Apple Safari before 6.0.1 does …
- CVE-2012-3715Apple Safari before 6.0.1 makes http requests for https URIs…
- CVE-2012-3716CoreText in Apple Mac OS X 10.7.x before 10.7.5 allows remot…
- CVE-2012-3717Rejected reason: This candidate is unused by its CNA.
- CVE-2012-3719Mail in Apple Mac OS X before 10.7.5 does not properly handl…
- CVE-2012-3720Mobile Accounts in Apple Mac OS X before 10.7.5 and 10.8.x b…
- CVE-2012-3721Profile Manager in Apple Mac OS X before 10.7.5 does not pro…
- CVE-2012-3722The Sorenson codec in QuickTime in Apple Mac OS X before 10.…
- CVE-2012-3723Apple Mac OS X before 10.7.5 does not properly handle the bN…
- CVE-2012-3724CFNetwork in Apple iOS before 6 does not properly identify t…
Are you affected by CVE-2012-3718?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST