CVE-2013-5169

CVE-2013-5169 affects CoreGraphics in Apple Mac OS X prior to 10.9. When the system enters display-sleep mode, screen locking may fail to block visibility of all windows, enabling physically proximate attackers to read sensitive information from the screen. The available documents describe the vu...

CVE-2013-5186

CVE-2013-5186 concerns Power Management in Apple Mac OS X before 10.9. The vulnerability arises from improper handling of the interaction between screen locking and power assertions, enabling physically proximate attackers to read sensitive information from a screen that should be locked. The ini...

CVE-2013-5173

CVE-2013-5173: The kernel random-number generator in Apple Mac OS X before 10.9 allows local users to cause a denial of service (partial availability) by issuing requests for many random numbers. Affected: Mac OS X prior to 10.9. No remediation details are provided in the supplied documents.

CVE-2013-5173

The random-number generator in the kernel in Apple Mac OS X before 10.9 provides lengthy exclusive access for processing of large requests, which allows local users to cause a denial of service temporary generator outage via an application that requires many random numbers...

CVE-2013-5172

The CVE-2013-5172 entry affects Apple macOS/iOS kernel code prior to macOS 10.9, where the output length for SHA-2 digest function calls is not properly determined. This can allow context-dependent attackers to cause a denial of service (panic) by triggering a digest operation, as demonstrated by...

CVE-2013-5172

The kernel in Apple Mac OS X before 10.9 does not properly determine the output length for SHA-2 digest function calls, which allows context-dependent attackers to cause a denial of service panic by triggering a digest operation, as demonstrated by an IPSec connection...

CVE-2013-5190

This CVE-2013-5190 affects Apple Mac OS X before 10.9, where Smart Card Services fail to properly enforce certificate revocation checks. The result is a denial of service (Smart Card usage outage) when the revocation-check procedure is interfered with. Public details consistently describe the vul...

CVE-2013-5184

The kernel in Apple Mac OS X before 10.9 does not properly check for errors during the processing of multicast Wi-Fi packets, which allows remote attackers to cause a denial of service system crash by leveraging presence in an 802.11 network's coverage area...

CVE-2013-5187

The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and instead incorrectly relies on a certain timeout setting, which allows physically proximate attackers to obtain sensitive information by reading a screen that...

CVE-2013-5189

Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows context-dependent attackers to bypass intended access restrictions in opportunistic circumstances by leveraging an unintended security configuration after the...

CVE-2013-5182

CVE-2013-5182 affects Apple Mac OS X prior to 10.9. The issue lies in mail processing where an unsigned message using multipart/signed can spoof the existence of a cryptographic signature, enabling remote attackers to misrepresent an email’s authenticity. The available documents confirm the vulne...

CVE-2013-5165

socketfilterfw in Application Firewall in Apple Mac OS X before 10.9 does not properly implement the --blockApp option, which allows remote attackers to bypass intended access restrictions via a network connection to an application for which blocking was configured...

CVE-2013-5174

CVE-2013-5174 affects the Apple Mac OS X kernel prior to 10.9. The issue is an integer signedness error in the kernel’s handling of a crafted tty read operation, enabling a local user to trigger a denial of service (system crash) . Root cause is the signedness bug in the kernel code. Public refer...

CVE-2013-5168

CVE-2013-5168 affects Apple Mac OS X before 10.9. The vulnerability in the Console component allows a user-assisted remote attacker to execute arbitrary applications by triggering a log entry with a crafted attached URL. This payload mechanism relies on the Console/logging workflow to run arbitra...

CVE-2013-5168

Console in Apple Mac OS X before 10.9 allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL...

CVE-2013-5165

CVE-2013-5165 concerns Mac OS X before 10.9, where the Application Firewall’s socketfilterfw fails to properly implement the --blockApp option. This allows remote attackers to bypass intended access restrictions by initiating a network connection to an application for which blocking has been conf...

PT-2013-5412

Name of the Vulnerable Software and Affected Versions CFNetwork in Apple Mac OS X versions prior to 10.9 Description The issue concerns CFNetwork in Apple Mac OS X, where it does not properly handle the deletion of session cookies when a reset operation is performed in Safari. This makes it easie...

PT-2013-5414

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue concerns the CoreGraphics component in Apple Mac OS X. When display-sleep mode is used, it does not ensure that screen locking blocks the visibility of all windows. This allows...

PT-2013-5413

Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.9 Description The issue allows user-assisted remote attackers to execute arbitrary applications by triggering a log entry with a crafted attached URL. This is related to the Console in Apple Mac OS X...

PT-2013-5421

Name of the Vulnerable Software and Affected Versions Mac OS X versions prior to 10.9 Description The issue is related to the kernel's handling of integer values during certain tty device operations. This can lead to a denial of service, causing the system to hang, when a local user triggers a...