Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2009-04-02 10:30
Updated : 2017-09-28 18:34
NVD link : CVE-2009-1236
Mitre link : CVE-2009-1236
JSON object : View
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
Products Affected
apple
- mac_os_x
- mac_os_x_server