Apple Mac OS X Remote Apple Events Out of Bounds Memory Access Security Vulnerability
BID:33814
Info
Apple Mac OS X Remote Apple Events Out of Bounds Memory Access Security Vulnerability
| Bugtraq ID: | 33814 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2009-0019 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 12 2009 12:00AM |
| Updated: | Feb 18 2009 04:17PM |
| Credit: | Apple |
| Vulnerable: |
Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.11 Apple Mac OS X Server 10.4.10 Apple Mac OS X Server 10.4.9 Apple Mac OS X Server 10.4.8 Apple Mac OS X Server 10.4.7 Apple Mac OS X Server 10.4.6 Apple Mac OS X Server 10.4.5 Apple Mac OS X Server 10.4.4 Apple Mac OS X Server 10.4.3 Apple Mac OS X Server 10.4.2 Apple Mac OS X Server 10.4.1 Apple Mac OS X Server 10.4 Apple Mac OS X Server 10.5 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.11 Apple Mac OS X 10.4.10 Apple Mac OS X 10.4.9 Apple Mac OS X 10.4.8 Apple Mac OS X 10.4.7 Apple Mac OS X 10.4.6 Apple Mac OS X 10.4.5 Apple Mac OS X 10.4.4 Apple Mac OS X 10.4.3 Apple Mac OS X 10.4.2 Apple Mac OS X 10.4.1 Apple Mac OS X 10.4 Apple Mac OS X 10.5 |
| Not Vulnerable: | |
Discussion
Apple Mac OS X Remote Apple Events Out of Bounds Memory Access Security Vulnerability
Apple Mac OS X is prone to an out-of-bounds memory-access vulnerability that affects the Remote Apple Events component.
A remote attacker may exploit this issue to gain access to memory contents or to crash the affected process, causing a denial-of-service condition.
The issue affects Mac OS X v10.4.11 and v10.5.6 (client and server).
NOTE: This issue was previously covered in BID 33759 (Apple Mac OS X 2009-001 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
Apple Mac OS X is prone to an out-of-bounds memory-access vulnerability that affects the Remote Apple Events component.
A remote attacker may exploit this issue to gain access to memory contents or to crash the affected process, causing a denial-of-service condition.
The issue affects Mac OS X v10.4.11 and v10.5.6 (client and server).
NOTE: This issue was previously covered in BID 33759 (Apple Mac OS X 2009-001 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
Exploit / POC
Apple Mac OS X Remote Apple Events Out of Bounds Memory Access Security Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple Mac OS X Remote Apple Events Out of Bounds Memory Access Security Vulnerability
Solution:
The vendor has released an advisory and updates to address this issue. Please see the references for more information.
Apple Mac OS X Server 10.4.11
Apple Mac OS X 10.4.11
Apple Mac OS X 10.5.6
Apple Mac OS X Server 10.5.6
Solution:
The vendor has released an advisory and updates to address this issue. Please see the references for more information.
Apple Mac OS X Server 10.4.11
-
Apple SecUpdSrvr2009-001PPC.dmg
for PPC
http://support.apple.com/downloads/Security_Update_2009_001__Server_Ti ger_PPC_ -
Apple SecUpdSrvr2009-001Univ.dmg
Universal
http://support.apple.com/downloads/Security_Update_2009_001__Server_Un iversal_
Apple Mac OS X 10.4.11
-
Apple SecUpd2009-001Intel.dmg
for Intel
http://support.apple.com/downloads/Security_Update_2009_001__Tiger_Int el_ -
Apple SecUpd2009-001PPC.dmg
for PPC
http://support.apple.com/downloads/Security_Update_2009_001__Tiger_PPC _
Apple Mac OS X 10.5.6
-
Apple SecUpd2009-001.dmg
http://support.apple.com/downloads/Security_Update_2009_001__Leopard_
Apple Mac OS X Server 10.5.6
-
Apple SecUpdSrvr2009-001.dmg
http://support.apple.com/downloads/Security_Update_2009_001__Server_Le opard_
References
Apple Mac OS X Remote Apple Events Out of Bounds Memory Access Security Vulnerability
References:
References: