NVD

Id
48523  
Name
CVE-2009-1236  
Description
Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-02  
Modified Date
2009-04-18  
Seq
2009-1236  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244616 48523 CVE-2009-1236 http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c  View
244617 48523 CVE-2009-1236 http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181  View
244618 48523 CVE-2009-1236 8262  View
244619 48523 CVE-2009-1236 34201  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40521 JVNDB-2009-001527 Apple Mac OS X の XNU に含まれる AppleTalk のネットワークスタックにおけるヒープオーバーフローの脆弱性 Apple Mac OS X の XNU に含まれる AppleTalk のネットワークスタックには、ヒープオーバーフローの脆弱性が存在します。 CVE-2009-1236 38667 CVE-2009-1236 48523 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001527.html 2009-04-02 2009-06-30 View