Описание
Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.5.3 (включая)
Одно из
cpe:2.3:a:apple:apple_remote_desktop:*:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.2.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.2.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.3:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.3.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.3.2:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.4:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.5:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.5.1:*:*:*:*:*:*:*
cpe:2.3:a:apple:apple_remote_desktop:3.5.2:*:*:*:*:*:*:*
Конфигурация 2Версия до 10.8.5 (включая)
Одно из
cpe:2.3:o:apple:mac_os_x:*:supplemental_update:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.0:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.1:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.2:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.3:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.4:*:*:*:*:*:*:*
cpe:2.3:o:apple:mac_os_x:10.8.5:*:*:*:*:*:*:*
EPSS
Процентиль: 86%
0.03044
Низкий
7.5 High
CVSS2
Дефекты
CWE-134
Связанные уязвимости
github
больше 3 лет назад
Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username.
EPSS
Процентиль: 86%
0.03044
Низкий
7.5 High
CVSS2
Дефекты
CWE-134