CVE

Id
39152  
CVE No.
CVE-2009-1717  
Status
Candidate  
Description
Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted size value in a CSI[4 xterm resize escape sequence that triggers a heap-based buffer overflow.  
Phase
Assigned (20090520)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430438 39152 CVE-2009-1717 BUGTRAQ:20090602 TPTI-09-04: Apple Terminal xterm Resize Escape Sequence Memory Corruption Vulnerability  View
430439 39152 CVE-2009-1717 URL:http://www.securityfocus.com/archive/1/archive/1/504031/100/0/threaded  View
430440 39152 CVE-2009-1717 MISC:http://dvlabs.tippingpoint.com/advisory/TPTI-09-04  View
430441 39152 CVE-2009-1717 CONFIRM:http://support.apple.com/kb/HT3549  View
430442 39152 CVE-2009-1717 BID:35182  View
430443 39152 CVE-2009-1717 URL:http://www.securityfocus.com/bid/35182  View
430444 39152 CVE-2009-1717 SECTRACK:1022322  View
430445 39152 CVE-2009-1717 URL:http://securitytracker.com/id?1022322  View
430446 39152 CVE-2009-1717 XF:macos-terminal-bo(50982)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40992 JVNDB-2009-001998 OpenEXR の解凍機能における任意のコードを実行される脆弱性 OpenEXR の Imf::hufUncompress 関数にある解凍機能には、初期化されていないポインタの処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる、あるいは任意のコードを実行される脆弱性が存在します。 CVE-2009-1721 39152 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001998.html  View