CVE-2013-0963

Identity Services in Apple iOS before 6.1 does not properly handle validation failures of AppleID certificates, which might allow physically proximate attackers to bypass authentication by leveraging an incorrect assignment of an empty string value to an AppleID...

Design/Logic Flaw

The Anti-theft service in AVG AntiVirus for Android allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer."...

CVE-2012-4207

The HZ-GB-2312 character-set implementation in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 does not properly handle a tilde character in proximity to a chunk delimiter, which allows remote...

CVE-2012-3737

The Passcode Lock implementation in Apple iOS before 6 does not properly restrict photo viewing, which allows physically proximate attackers to view arbitrary stored photos by spoofing a time value...

When, Not Whether, Is the Question for Mobile Authentication, Research Finds

The findings from a recent study carried out by Microsoft Research and the University of South Carolina suggest that we should be asking ourselves when to require authentication rather than whether to require authentication. The research puts forth the idea of tailoring authentication requirement...

Information disclosure

slock 0.9 does not properly handle the XRaiseWindow event when the screen is locked, which might allow physically proximate attackers to obtain sensitive information by pressing a button, which reveals the desktop and active windows...

Fingerprint And Proximity Access Control Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 + Device: Fingerprint & Proximity Access Control + Model: ZEM560 and others + Kernel: 2.6.24 Treckle on an MIPS + Vulnerability: Auth Bypass + Impact: By using a direct URL attackers can bypass the fingerprint & proximity security and open the door...

CVE-2011-3431

The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen...

Default credentials

Pentaho BI Server 1.7.0.1062 and earlier does not set the autocomplete tag to off on web pages using a password field, which might allow physically proximate attackers to obtain the password...

Microsoft Windows Bluetooth Stack 'bthport.sys' Driver Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successful exploits will completely compromise affected computers. Technologies Affected Microsoft Windows 7 Home Premium...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2010:040)

Multiple vulnerabilities has been discovered and corrected in gnome-screensaver : gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattend...

CVE-2009-4642

The vulnerability CVE-2009-4642 affects gnome-screensaver 2.26.1, which relies on the gnome-session D-Bus interface to determine session idle time. This occurs even on Xfce environments (e.g., Xubuntu/Mythbuntu), enabling physically proximate attackers to access an unattended workstation where sc...

CVE-2010-0414

gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor...

CVE-2010-0226

SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time...

Design/Logic Flaw

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

The Difficulty of Un-Authentication

By Bruce Schneier In computer security, a lot of effort is spent on the authentication problem. Whether it’s passwords, secure tokens, secret questions, image mnemonics, or something else, engineers are continually coming up with more complicated — and hopefully more secure — ways for you to prov...

Microsoft Windows Wireless LAN AutoConfig Frame Parsing Remote Code Execution Vulnerability

Description Microsoft Windows is prone to a remote code-execution vulnerability because the Wireless LAN AutoConfig Service fails to properly validate certain network frames. To exploit this issue, an attacker must be within close physical proximity of the affected computer. Attackers can exploit...

GLSA-200907-08 : Multiple Ralink wireless drivers: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200907-08 Multiple Ralink wireless drivers: Execution of arbitrary code Aviv reported an integer overflow in multiple Ralink wireless card drivers when processing a probe request packet with a long SSID, possibly related to an...

Code injection

Toshiba Face Recognition 2.0.2.32 allows physically proximate attackers to obtain notebook access by presenting a large number of images for which the viewpoint and lighting have been modified to match a stored image of the authorized notebook user...

CVE-2009-0656

Asus SmartLogon 1.0.0005 allows physically proximate attackers to bypass "security functions" by presenting an image with a modified viewpoint that matches the posture of a stored image of the authorized notebook user...