NVD

Id
48522  
Name
CVE-2009-1235  
Description
XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-02  
Modified Date
2009-08-13  
Seq
2009-1235  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244605 48522 CVE-2009-1235 APPLE-SA-2009-08-05-1  View
244606 48522 CVE-2009-1235 http://support.apple.com/kb/HT3757  View
244607 48522 CVE-2009-1235 http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.c  View
244608 48522 CVE-2009-1235 http://www.digit-labs.org/files/exploits/xnu-hfs-fcntl-v2.sh  View
244609 48522 CVE-2009-1235 http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181  View
244610 48522 CVE-2009-1235 8266  View
244611 48522 CVE-2009-1235 34203  View
244612 48522 CVE-2009-1235 1022671  View
244613 48522 CVE-2009-1235 TA09-218A  View
244614 48522 CVE-2009-1235 ADV-2009-0822  View
244615 48522 CVE-2009-1235 ADV-2009-2172  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40522 JVNDB-2009-001528 Apple Mac OS X の XNU におけるカーネルメモリの上書きおよび権限昇格の脆弱性 Apple Mac OS X の XNU には、ユーザスペースと HFS IOCTL ハンドラの相互作用を適切に制限しないため、カーネルメモリの上書きおよび権限昇格の脆弱性が存在します。 CVE-2009-1235 38666 CVE-2009-1235 48522 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001528.html 2009-04-02 2009-09-02 View