CVE-2009-1236

No fix known EPSS 8%

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.

Published 2009-04-02 · CVE record · OSV

Products: apple mac_os_x, apple mac_os_x_server