PT-2009-2838 · Apple · Coregraphics+2

Published 2009-05-13 · Updated 2017-08-08 · CVE-2009-0145

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CoreGraphics in Apple Mac OS X versions 10.4.11 through 10.5.6 CoreGraphics in Apple iPhone OS versions 1.0 through 2.2.1 CoreGraphics in Apple iPhone OS for iPod touch versions 1.1 through 2.2.1

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted PDF file that triggers memory corruption.

Recommendations For Mac OS X versions 10.4.11 through 10.5.6, update to version 10.5.7 or later. For iPhone OS versions 1.0 through 2.2.1, update to a version later than 2.2.1. For iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version later than 2.2.1.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-0145

Affected Products

Coregraphics

Macos X

Ios

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2009-0145 · Security Note
• http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.html · Vendor Advisory
• http://support.apple.com/kb/HT3549 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50481 · Note
• http://securityfocus.com/bid/34926 · Note
• http://securitytracker.com/id?1022209 · Note
• http://vupen.com/english/advisories/2009/1297 · Note
• http://vupen.com/english/advisories/2009/1621 · Note
• http://vupen.com/english/advisories/2009/1522 · Note
• http://secunia.com/advisories/35379 · Note
• http://secunia.com/advisories/35074 · Note
• http://us-cert.gov/cas/techalerts/TA09-133A.html · Note
• http://support.apple.com/kb/HT3639 · Note