medium4.9Public exploit code
CVE-2009-1237
Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumpti…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple Mac OSX xnu 1228.3.13 - 'Profil' Kernel Memory Leak/Denial of Service (PoC)2009-03-23 · dos · osx · Verified
- Apple Mac OSX xnu 1228.3.13 - 'macfsstat' Local Kernel Memory Leak/Denial of Service2009-03-23 · dos · osx · Verified
Impact
Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Mac Os X | through 10.5.6 Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3 |
| Apple | Mac Os X Server | through 10.5.6 Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/34424
- http://www.digit-labs.org/files/exploits/xnu-macfsstat-leak.c
- http://www.digit-labs.org/files/exploits/xnu-profil-leak.c
- http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181
- http://www.securityfocus.com/bid/34202
- https://www.exploit-db.com/exploits/8263
- https://www.exploit-db.com/exploits/8264
- http://secunia.com/advisories/34424
- http://www.digit-labs.org/files/exploits/xnu-macfsstat-leak.c
- http://www.digit-labs.org/files/exploits/xnu-profil-leak.c
- http://www.informationweek.com/news/hardware/mac/showArticle.jhtml?articleID=216401181
- http://www.securityfocus.com/bid/34202
- https://www.exploit-db.com/exploits/8263
- https://www.exploit-db.com/exploits/8264