CVE-2013-5229

published 2015-11-14

CVE-2013-5229: The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon…

low 3.7 CVSS 3.1

AV L AC H Au N C P I P A P

The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apple	apple_remote_desktop	<= 3.6.2	—
apple	mac_os_x	<= 10.8.5	—

CWE-254