NVD

Id
48525  
Name
CVE-2009-1238  
Description
Race condition in the HFS vfs sysctl interface in XNU 1228.8.20 and earlier on Apple Mac OS X 10.5.6 and earlier allows local users to cause a denial of service (kernel memory corruption) by simultaneously executing the same HFS_SET_PKG_EXTENSIONS code path in multiple threads, which is problematic because of lack of mutex locking for an unspecified global variable.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-02  
Modified Date
2009-04-18  
Seq
2009-1238  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
244626 48525 CVE-2009-1238 http://www.digit-labs.org/files/exploits/xnu-vfssysctl-dos.c  View
244627 48525 CVE-2009-1238 http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181  View
244628 48525 CVE-2009-1238 8265  View
244629 48525 CVE-2009-1238 34202  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40519 JVNDB-2009-001525 Apple Mac OS X の XNU に含まれる HFS vfs sysctl インターフェースにおける競合状態の脆弱性 Apple Mac OS X の XNU に含まれる HFS vfs sysctl インターフェースには、競合状態の脆弱性が存在します。 CVE-2009-1238 38669 CVE-2009-1238 48525 7.2 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001525.html 2009-04-02 2009-06-30 View