Quartz Composer in Apple Mac OS X before 10.7.4, when the RSS Visualizer screensaver is enabled, allows physically proximate attackers to bypass screen locking and launch a Safari process via unspecified vectors.
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/53445 | vdb entry |
http://www.securityfocus.com/bid/53473 | vdb entry |
http://support.apple.com/kb/HT5281 | vendor advisory |
http://lists.apple.com/archives/security-announce/2012/May/msg00001.html | vendor advisory |