GCVE - cpe:2.3:a:apple:apple_remote_desktop:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:apple_remote_desktop:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Apple Remote Desktop (`28707c31-eac2-5832-94f1-fd031b4b61e2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-2488`	vulnerable	2026-06-08 05:09:24.591766	Details available A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords. Published: 2021-12-23T19:48:20.000Z Updated: 2024-08-05T13:55:06.152Z Open on db.gcve.eu Reference links https://support.apple.com/en-us/HT207622	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5229`	vulnerable	2026-06-08 05:04:51.111094	Details available The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physically proximate attackers to bypass intended access restrictions by entering a command in this box. Published: 2015-11-14T02:00:00.000Z Updated: 2024-08-06T17:06:52.352Z Open on db.gcve.eu Reference links http://jvndb.jvn.jp/jvndb/JVNDB-2015-000177 http://jvn.jp/en/jp/JVN56210048/741993/index.html http://www.securitytracker.com/id/1034187 http://jvn.jp/en/jp/JVN56210048/index.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5136`	vulnerable	2026-06-08 05:04:50.901240	Details available Apple Remote Desktop before 3.7 does not properly use server authentication-type information during decisions about whether to present an unencrypted-connection warning message, which allows remote attackers to obtain sensitive information in opportunistic circumstances by sniffing the network during an unintended cleartext VNC session. Published: 2013-10-24T01:00:00.000Z Updated: 2024-09-17T02:15:59.993Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/security-announce/2013/Oct/msg00008.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5135`	vulnerable	2026-06-08 05:04:50.886836	Details available Format string vulnerability in Screen Sharing Server in Apple Mac OS X before 10.9 and Apple Remote Desktop before 3.5.4 allows remote attackers to execute arbitrary code via format string specifiers in a VNC username. Published: 2013-10-24T01:00:00.000Z Updated: 2024-09-17T01:36:47.689Z Open on db.gcve.eu Reference links http://lists.apple.com/archives/security-announce/2013/Oct/msg00004.html http://lists.apple.com/archives/security-announce/2013/Oct/msg00007.html http://lists.apple.com/archives/security-announce/2013/Oct/msg00008.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.