Mac OS X 10.8 < 10.8.3 Multiple Vulnerabilities (Security Update 2013-001)

Binary data 801018.prm...

CVE-2013-0970

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

Design/Logic Flaw

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

CVE-2013-0970

Apple Mac OS X through 10.8.2 is vulnerable in Messages to bypassing the FaceTime call-confirmation prompt when a specially crafted FaceTime: URL is processed; CVE-2013-0970. Affected component is the Messages/FaceTime URL handling. Impact is bypass of user confirmation to initiate FaceTime calls...

CVE-2013-0970

Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL...

CVE-2012-3738

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact...

CVE-2012-3736

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

Design/Logic Flaw

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

CVE-2012-3738

CVE-2012-3738 affects Apple iOS before 6, in the Passcode Lock Emergency Dialer. A logic issue allowed a physically proximate user to bypass access restrictions and initiate FaceTime calls via Voice Dialing, potentially exposing contact information. The issue is tied to the Emergency Dialer scree...

CVE-2012-3738

The Emergency Dialer screen in the Passcode Lock implementation in Apple iOS before 6 does not properly limit the dialing methods, which allows physically proximate attackers to bypass intended access restrictions and make FaceTime calls through Voice Dialing, or obtain sensitive contact...

CVE-2012-3736

The Passcode Lock implementation in Apple iOS before 6 allows physically proximate attackers to bypass an intended passcode requirement via vectors related to ending a FaceTime call...

CVE-2012-3736

CVE-2012-3736 affects Apple iOS prior to 6, where a logic issue in the Passcode Lock allows a physically proximate attacker to bypass the passcode by exploiting the FaceTime call-ending flow. Affected platforms include iPhone 3GS and later, iPod touch 4th gen and later, and iPad 2 and later. The ...

Apple FaceTime Detection

Binary data 5999.prm...

CVE-2010-1810

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate...

Design/Logic Flaw

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate...

CVE-2010-1810

CVE-2010-1810 affects FaceTime on Apple iOS prior to 4.1 (iPhone/iPod touch). The issue is that invalid X.509 certificates are not handled properly, which can enable a man-in-the-middle to redirect calls with a crafted certificate. The vulnerability is tied to the handling of TLS/SSL certificates...

CVE-2010-1810

FaceTime in Apple iOS before 4.1 on the iPhone and iPod touch does not properly handle invalid X.509 certificates, which allows man-in-the-middle attackers to redirect calls via a crafted certificate...

PT-2010-3443 · Apple · Iphone +3

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 4.1 on the iPhone and iPod touch Description: The issue is related to the handling of invalid X.509 certificates in FaceTime, allowing man-in-the-middle attackers to redirect calls via a crafted certificate...