VDB
CVE-2009-1717
CVE-2009-1717
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted size value in a CSI[4 xterm resize escape sequence that triggers a heap-based buffer overflow.
EPSS 3.02% · 86.2th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
3.02%
86.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| apple | mac_os_x_server | 10.5.4, 10.5.0, 10.5.1 |
| apple | mac_os_x | 10.5.0, 10.5.1, 10.5.3 |
| n/a | n/a | n/a |
Timeline
- Jun 5, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 17, 2022 EPSS Score
- Jul 18, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
References
- http://support.apple.com/kb/HT3549 url
- 35182 vdb
- 1022322 vdb
- macos-terminal-bo(50982) vdb
- 20090602 TPTI-09-04: Apple Terminal xterm Resize Escape Sequence Memory Corruption Vulnerability mailing-list
- http://dvlabs.tippingpoint.com/advisory/TPTI-09-04 url
- https://nvd.nist.gov/vuln/detail/CVE-2009-1717 advisory