CVE-2009-1236 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Vector
NIST	NIST	10 UNKNOWN	NETWORK	LOW	AV:N/AC:L/Au:N/C:C/I:C/A:C
mitre	CNA	---			---
CVE	ADP	---			---

Base Score

CVSS 3.x

EPSS Score

Percentile: 89%

Vendor	Product	Version
apple	mac_os_x	𝑥 ≤ 10.5.6
apple	mac_os_x	10.0
apple	mac_os_x	10.0.0
apple	mac_os_x	10.0.1
apple	mac_os_x	10.0.2
apple	mac_os_x	10.0.3
apple	mac_os_x	10.0.4
apple	mac_os_x	10.1
apple	mac_os_x	10.1.0
apple	mac_os_x	10.1.1
apple	mac_os_x	10.1.2
apple	mac_os_x	10.1.3
apple	mac_os_x	10.1.4
apple	mac_os_x	10.1.5
apple	mac_os_x	10.2
apple	mac_os_x	10.2.0
apple	mac_os_x	10.2.1
apple	mac_os_x	10.2.2
apple	mac_os_x	10.2.3
apple	mac_os_x	10.2.4
apple	mac_os_x	10.2.5
apple	mac_os_x	10.2.6
apple	mac_os_x	10.2.7
apple	mac_os_x	10.2.8
apple	mac_os_x	10.3
apple	mac_os_x	10.3.0
apple	mac_os_x	10.3.1
apple	mac_os_x	10.3.2
apple	mac_os_x	10.3.3
apple	mac_os_x	10.3.4
apple	mac_os_x	10.3.5
apple	mac_os_x	10.3.6
apple	mac_os_x	10.3.7
apple	mac_os_x	10.3.8
apple	mac_os_x	10.3.9
apple	mac_os_x	10.4
apple	mac_os_x	10.4.0
apple	mac_os_x	10.4.1
apple	mac_os_x	10.4.2
apple	mac_os_x	10.4.3
apple	mac_os_x	10.4.4
apple	mac_os_x	10.4.5
apple	mac_os_x	10.4.6
apple	mac_os_x	10.4.7
apple	mac_os_x	10.4.8
apple	mac_os_x	10.4.8
apple	mac_os_x	10.4.8
apple	mac_os_x	10.4.8
apple	mac_os_x	10.4.9
apple	mac_os_x	10.4.10
apple	mac_os_x	10.4.11
apple	mac_os_x	10.5
apple	mac_os_x	10.5.0
apple	mac_os_x	10.5.1
apple	mac_os_x	10.5.2
apple	mac_os_x	10.5.2:2008-002
apple	mac_os_x	10.5.3
apple	mac_os_x	10.5.4
apple	mac_os_x	10.5.5
apple	mac_os_x_server	𝑥 ≤ 10.5.6
apple	mac_os_x_server	10.0
apple	mac_os_x_server	10.0.0
apple	mac_os_x_server	10.0.1
apple	mac_os_x_server	10.0.2
apple	mac_os_x_server	10.0.3
apple	mac_os_x_server	10.0.4
apple	mac_os_x_server	10.1
apple	mac_os_x_server	10.1.0
apple	mac_os_x_server	10.1.1
apple	mac_os_x_server	10.1.2
apple	mac_os_x_server	10.1.3
apple	mac_os_x_server	10.1.4
apple	mac_os_x_server	10.1.5
apple	mac_os_x_server	10.2
apple	mac_os_x_server	10.2.0
apple	mac_os_x_server	10.2.1
apple	mac_os_x_server	10.2.2
apple	mac_os_x_server	10.2.3
apple	mac_os_x_server	10.2.4
apple	mac_os_x_server	10.2.5
apple	mac_os_x_server	10.2.6
apple	mac_os_x_server	10.2.7
apple	mac_os_x_server	10.2.8
apple	mac_os_x_server	10.3
apple	mac_os_x_server	10.3.0
apple	mac_os_x_server	10.3.1
apple	mac_os_x_server	10.3.2
apple	mac_os_x_server	10.3.3
apple	mac_os_x_server	10.3.4
apple	mac_os_x_server	10.3.5
apple	mac_os_x_server	10.3.6
apple	mac_os_x_server	10.3.7
apple	mac_os_x_server	10.3.8
apple	mac_os_x_server	10.3.9
apple	mac_os_x_server	10.4
apple	mac_os_x_server	10.4.0
apple	mac_os_x_server	10.4.1
apple	mac_os_x_server	10.4.2
apple	mac_os_x_server	10.4.3
apple	mac_os_x_server	10.4.4
apple	mac_os_x_server	10.4.5
apple	mac_os_x_server	10.4.6
apple	mac_os_x_server	10.4.7
apple	mac_os_x_server	10.4.8
apple	mac_os_x_server	10.4.9
apple	mac_os_x_server	10.4.10
apple	mac_os_x_server	10.4.11
apple	mac_os_x_server	10.5
apple	mac_os_x_server	10.5.0
apple	mac_os_x_server	10.5.1
apple	mac_os_x_server	10.5.2
apple	mac_os_x_server	10.5.3
apple	mac_os_x_server	10.5.4
apple	mac_os_x_server	10.5.5

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

References

http://secunia.com/advisories/34424

http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c

http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181

http://www.securityfocus.com/bid/34201

https://www.exploit-db.com/exploits/8262

http://secunia.com/advisories/34424

http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c

http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181

http://www.securityfocus.com/bid/34201

https://www.exploit-db.com/exploits/8262