← Database

CVE-2009-1236

CRITICAL CVSS: 10.0 Published: 2009-04-02 Modified: 2026-06-16

Description

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.

Affected Platforms

Apple Mac Os X ServerApple Mac Os X

Weakness Type

CWE-119

References