Unscored CVE-2013-5135 EUVD-2013-4975GHSA-8fr8-vc5w-ccvx

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote atta…

Published Oct 24, 2013 · Updated Sep 17, 2024 · Assigned by apple

Description

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username.

References

APPLE-SA-2013-10-22-3 vendor-advisory
APPLE-SA-2013-10-22-6 vendor-advisory
APPLE-SA-2013-10-22-7 vendor-advisory