[USN-2741-1] Unity Settings Daemon vulnerability

========================================================================== Ubuntu Security Notice USN-2741-1 September 16, 2015 unity-settings-daemon vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

CVE-2015-5923

Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors...

CVE-2015-5849

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

CVE-2015-5833

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation...

Design/Logic Flaw

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

Design/Logic Flaw

Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors...

CVE-2015-5849

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

CVE-2015-5923

Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors...

CVE-2015-5849

The CVE-2015-5849 issue affects Apple OS X (pre-10.11) where the AppleEvents filtering implementation mishandles attempts to send events to a different user. This allows a local user, connected via a screen-sharing session, to bypass intended access restrictions by delivering AppleEvents to anoth...

CVE-2015-5833

CVE-2015-5833 affects Apple OS X pre-10.11: the Login Window component does not reliably lock the screen at the intended time, enabling physically proximate attackers to access an unattended workstation. The available documentation lists this as a local access risk but provides no explicit remedi...

CVE-2015-5923

CVE-2015-5923 affects Apple iOS before 9.0.2, where the lock screen does not properly restrict options, potentially allowing a physically proximate attacker to access photos and contact data via unspecified vectors. The impact is read access to some data on a locked device. The provided sources i...

CVE-2015-5833

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation...

CVE-2015-5849: Undefined Security Weakness

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

PT-2015-2299

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.0.2 Description The issue is related to errors in access restriction to information on the lock screen. It may allow a local attacker to gain access to protected information. The estimated number of potentially...

PT-2015-2270

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to the filtering implementation in AppleEvents, which mishandles attempts to send events to a different user. This can be exploited by attackers to bypass intended access...

PT-2015-2268

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to the Login Window component, which does not properly lock the screen at the intended time. This allows physically proximate attackers to gain access to an unattended...

CVE-2015-5833: Undefined Security Weakness

The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation...

CVE-2015-5923: Exposure of Sensitive Information to an Unauthorized Actor

Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to read contact data or view photos via unspecified vectors...

Android Information Leakage Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Media Projection is a media projection component. A security vulnerability exists in the Media Projection component of Android. The vulnerability can be exploited by an...

CVE-2015-3878

Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to bypass an intended screen-recording warning feature and obtain sensitive screen-snapshot information via a crafted application that references a long application name, aka internal bug 23345192...