NetSight
IP …
high7.5

CVE-2013-5135

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arb…

Impact

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username.

Affected products

VendorProductAffected versions
AppleApple Remote Desktop
through 3.5.3
Versions 3.0.0, 3.1, 3.2, 3.2.1, 3.2.2
AppleMac Os X
through 10.8.5
Versions 10.8.0, 10.8.1, 10.8.2, 10.8.3, 10.8.4

Weakness classification

CWE-134

References