NetSight
IP …
critical10.0Public exploit code

CVE-2009-1236

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.5.6
Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3
AppleMac Os X Server
through 10.5.6
Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3

Weakness classification

CWE-119

References