The vulnerability of the Mac OS X operating system, which allows a perpetrator to gain access to protected information

The vulnerability of the AppleEvents component’s implementation in the Mac OS X operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information using...

CVE-2015-5849

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

Design/Logic Flaw

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

CVE-2015-5849

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

CVE-2015-5849

The CVE-2015-5849 issue affects Apple OS X (pre-10.11) where the AppleEvents filtering implementation mishandles attempts to send events to a different user. This allows a local user, connected via a screen-sharing session, to bypass intended access restrictions by delivering AppleEvents to anoth...

PT-2015-2270

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.11 Description The issue is related to the filtering implementation in AppleEvents, which mishandles attempts to send events to a different user. This can be exploited by attackers to bypass intended access...

CVE-2015-5849: Undefined Security Weakness

The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection...

Apple OS X Apple Event Delivery Vulnerability

Apple OS X is an operating system developed by Apple Inc. Apple OS X Apple Event Filter has a security vulnerability that allows Apple events to be sent to a local user session by a linked user via screen sharing...

CVE-2015-1148

Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file...

CVE-2015-1148

Screen Sharing in Apple OS X before 10.10.3 stores the password of a user in a log file, which might allow context-dependent attackers to obtain sensitive information by reading this file...

CVE-2015-1148

CVE-2015-1148 affects Apple OS X versions earlier than 10.10.3. The vulnerability arises because Screen Sharing stores a user’s password in a log file, which could allow a context-dependent (local) attacker to read sensitive information from that file. The available documents specify the affected...

PT-2015-5130

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10.3 Description The issue allows context-dependent attackers to obtain sensitive information by reading a log file where the password of a user is stored. This is related to Screen Sharing in Apple OS X...

Apple Mac OS X User Password Recording Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. Apple Mac OS X, in some cases, screen sharing records user passwords, which can be exploited by attackers to obtain sensitive information...

CVE-2013-5135

CVE-2013-5135 targets Apple Mac OS X prior to 10.9 and Apple Remote Desktop prior to 3.5.4. The issue is a format string vulnerability in Screen Sharing Server that permits remote code execution via format string specifiers in a VNC username. Impact is remote execution of arbitrary code with netw...

CVE-2013-5135

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username...

CVE-2013-5135: Use of Externally-Controlled Format String

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username...

Mac OS X 10.x < 10.9 Multiple Vulnerabilities (BEAST)

The remote host is running a version of Mac OS X 10.x that is prior to version 10.9. The newer version contains multiple security-related fixes for the following components : - Application Firewall - App Sandbox - Bluetooth - CFNetwork - CFNetwork SSL - Console - CoreGraphics - curl - dyld -...

Design/Logic Flaw

Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access...

CVE-2013-1033: Undefined Security Weakness

Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access...

PT-2013-2825

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.8.5 Description The issue is related to the Screen Lock feature in Apple Mac OS X, which does not properly track sessions. This allows remote authenticated users to bypass the lock by leveraging screen-shari...