CVE-2013-5169

CoreGraphics in Apple Mac OS X before 10.9, when display-sleep mode is used, does not ensure that screen locking blocks the visibility of all windows, which allows physically proximate attackers to obtain sensitive information by reading the screen...

CVE-2013-5188

The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a transition out of hibernation, which allows physically proximate attackers to obtain access by visiting an unattended workstation in the hibernating state...

CVE-2013-5187

The CVE-2013-5187 entry concerns Apple Mac OS X pre-10.9 where the Screen Lock implementation fails to immediately transition to a locked state. The issue stems from the system’s reliance on a timeout for Keychain Status menu lock commands, potentially allowing a physically proximate attacker to ...

CVE-2013-5188

The CVE-2013-5188 entry concerns Apple macOS X before 10.9 where, when hibernation and autologin are enabled, the Screen Lock transition out of hibernation does not require a password. This enables physically proximate attackers to gain access by visiting an unattended workstation in a hibernatin...

CVE-2013-5135

CVE-2013-5135 targets Apple Mac OS X prior to 10.9 and Apple Remote Desktop prior to 3.5.4. The issue is a format string vulnerability in Screen Sharing Server that permits remote code execution via format string specifiers in a VNC username. Impact is remote execution of arbitrary code with netw...

CVE-2013-5187

The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and instead incorrectly relies on a certain timeout setting, which allows physically proximate attackers to obtain sensitive information by reading a screen that...

CVE-2013-5169

CVE-2013-5169 affects CoreGraphics in Apple Mac OS X prior to 10.9. When the system enters display-sleep mode, screen locking may fail to block visibility of all windows, enabling physically proximate attackers to read sensitive information from the screen. The available documents describe the vu...

PT-2013-5393

Name of the Vulnerable Software and Affected Versions Apple Keynote versions prior to 6.0 Description The issue arises from the improper handling of the interaction between Keynote presentation mode and the Screen Lock implementation. This allows physically proximate attackers to obtain access by...

CVE-2013-5148: Undefined Security Weakness

Apple Keynote before 6.0 does not properly handle the interaction between Keynote presentation mode and the Screen Lock implementation, which allows physically proximate attackers to obtain access by visiting an unattended workstation on which this mode was enabled during a sleep operation...

PT-2013-5431

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue arises from improper handling of the interaction between locking and power assertions in Power Management. This allows physically proximate attackers to obtain sensitive information b...

CVE-2013-5188: Undefined Security Weakness

The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a transition out of hibernation, which allows physically proximate attackers to obtain access by visiting an unattended workstation in the hibernating state...

CVE-2013-5135: Use of Externally-Controlled Format String

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username...

PT-2013-5432

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue concerns the Screen Lock implementation, which does not immediately transition into the locked state when the Lock Screen command is given through the Keychain Status menu. Instead, it reli...

PT-2013-5433

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue concerns the Screen Lock implementation, which fails to require a password when transitioning out of hibernation, allowing physically proximate attackers to gain access to an unattended...

CVE-2013-5187: Undefined Security Weakness

The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and instead incorrectly relies on a certain timeout setting, which allows physically proximate attackers to obtain sensitive information by reading a screen that...

Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.x that is prior to version 10.9. The newer version contains multiple security-related fixes for the following components : - Application Firewall - App Sandbox - Bluetooth - CFNetwork - CFNetwork SSL - Console - CoreGraphics - curl - dyld -...

iPhone iOS 7.0.2 Sim Lock Screen Bypass vulnerability

If you're unlucky enough to lose your Smartphone or have it stolen, anyone who finds the device will also be able to access any content stored on the device, whether its contacts, music or documents. But by implementing a SIM card PIN lock, everytime the device is powered down and subsequently...

Apple iOS 7 iPad2 Face Time 1.0.2 - Privacy Vulnerability

Document Title: =============== Apple iOS 7 iPad2 Face Time 1.0.2 - Privacy Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1087 Video: http://www.youtube.com/watch?v=7acWAEZpbgs Release Date: ============= 2013-09-24 Vulnerability Laborato...

iOS 7 lock screen vulnerability that can bypass the password to view the photos and other information containing operation step-the vulnerability warning-the black bar safety net

Apple's new iPhone 5S a major selling point is its safety features,including its new addition to the fingerprint processor and the next generation of iOS 7 built-in anti-theft feature. However, a since on behalf of iOS 6 will be any bug so far is still there,you can make everyone bypass the lock...

MS13-071 Microsoft Windows Theme File Handling Code Execution

This Metasploit module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows 2003. The vulnerability exists in the handling of the Screen Saver path, in the boot section. An arbitrary path can be used as screen saver, including a remote SMB resource, which allows for remote...