QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2009-1235

Back to search

CVE-2009-1235

Published: Apr 2, 2009

Modified: Aug 7, 2024

PUBLISHED

Description

XNU 1228.9.59 and earlier on Apple Mac OS X 10.5.6 and earlier does not properly restrict interaction between user space and the HFS IOCTL handler, which allows local users to overwrite kernel memory and gain privileges by attaching an HFS+ disk image and performing certain steps involving HFS_GET_BOOT_INFO fcntl calls.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2009-0822
vdb-entry
x_refsource_VUPEN
36096
third-party-advisory
x_refsource_SECUNIA
34424
third-party-advisory
x_refsource_SECUNIA
APPLE-SA-2009-08-05-1
vendor-advisory
x_refsource_APPLE
34203
vdb-entry
x_refsource_BID
8266
exploit
x_refsource_EXPLOIT-DB
1022671
vdb-entry
x_refsource_SECTRACK
ADV-2009-2172
vdb-entry
x_refsource_VUPEN
TA09-218A
third-party-advisory
x_refsource_CERT

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now