Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)

Binary data 801018.prm...

CVE-2013-0970

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

Design/Logic Flaw

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

CVE-2013-0970

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

CVE-2013-0970

Apple Mac OS X through 10.8.2 is vulnerable in Messages to bypassing the FaceTime call-confirmation prompt when a specially crafted FaceTime: URL is processed; CVE-2013-0970. Affected component is the Messages/FaceTime URL handling. Impact is bypass of user confirmation to initiate FaceTime calls...

CVE-2012-3738

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact...

CVE-2012-3736

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

Design/Logic Flaw

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

CVE-2012-3736

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

CVE-2012-3738

CVE-2012-3738 affects Apple iOS before 6, in the Passcode Lock Emergency Dialer. A logic issue allowed a physically proximate user to bypass access restrictions and initiate FaceTime calls via Voice Dialing, potentially exposing contact information. The issue is tied to the Emergency Dialer scree...

CVE-2012-3736

CVE-2012-3736 affects Apple iOS prior to 6, where a logic issue in the Passcode Lock allows a physically proximate attacker to bypass the passcode by exploiting the FaceTime call-ending flow. Affected platforms include iPhone 3GS and later, iPod touch 4th gen and later, and iPad 2 and later. The ...

CVE-2012-3738

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact...

Apple FaceTime Detection

Binary data 5999.prm...

CVE-2010-1810

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate...

Design/Logic Flaw

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate...

CVE-2010-1810

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate...

CVE-2010-1810

CVE-2010-1810 affects FaceTime on Apple iOS prior to 4.1 (iPhone/iPod touch). The issue is that invalid X.509 certificates are not handled properly, which can enable a man-in-the-middle to redirect calls with a crafted certificate. The vulnerability is tied to the handling of TLS/SSL certificates...

PT-2010-3443 · Apple · Iphone +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 on the iPhone and iPod touch Description: The issue is related to the handling of invalid X.509 certificates in FaceTime, allowing man-in-the-middle attackers to redirect calls via a crafted certificate...