NetSight
IP …
medium6.8

CVE-2009-0157

Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (…

Impact

Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5
AppleMac Os X Server
Versions 10.5.0, 10.5.1, 10.5.2, 10.5.3, 10.5.4, 10.5.5

Weakness classification

CWE-119

References