NetSight
IP …
high7.2Public exploit code

CVE-2009-1235

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allow…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.5.6
Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3
AppleMac Os X Server
through 10.5.6
Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3

Weakness classification

CWE-264

References