CVE-2009-0020 - Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption

Back Back to CVE browser

HIGH

Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption

Published Feb 13, 2009

7.8

HIGH

CVSS 2.0

EPSS 2.90%

Description

Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (6)

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://secunia.com/advisories/33937
third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT3438
x_refsource_CONFIRM
http://www.securityfocus.com/bid/33759
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0422
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0033
Advisory

Link	Providers	Tags
http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html		vendor-advisoryx_refsource_APPLEPatchVendor Advisory
http://secunia.com/advisories/33937		third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT3438		x_refsource_CONFIRM
http://www.securityfocus.com/bid/33759		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/0422		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0033		Advisory