CVE-2013-5135

Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
appleapple_remote_desktop
𝑥
≤ 3.5.3
appleapple_remote_desktop
3.0.0
appleapple_remote_desktop
3.1
appleapple_remote_desktop
3.2
appleapple_remote_desktop
3.2.1
appleapple_remote_desktop
3.2.2
appleapple_remote_desktop
3.3
appleapple_remote_desktop
3.3.1
appleapple_remote_desktop
3.3.2
appleapple_remote_desktop
3.4
appleapple_remote_desktop
3.5
appleapple_remote_desktop
3.5.1
appleapple_remote_desktop
3.5.2
applemac_os_x
𝑥
≤ 10.8.5
applemac_os_x
10.8.0
applemac_os_x
10.8.1
applemac_os_x
10.8.2
applemac_os_x
10.8.3
applemac_os_x
10.8.4
applemac_os_x
10.8.5
𝑥
= Vulnerable software versions