Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-2804
HistorySep 14, 2009 - 4:30 p.m.

CVE-2009-2804

2009-09-1416:30:00
CWE-189
[email protected]
web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.1%

JSON

Integer overflow in ColorSync in Apple Mac OS X 10.4.11 and 10.5.8, and Safari before 4.0.4 on Windows, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ColorSync profile embedded in an image, leading to a heap-based buffer overflow.

Affected configurations

NVD
Node
applemac_os_xMatch10.4.11
OR
applemac_os_xMatch10.5.8
OR
applemac_os_x_serverMatch10.4.11
OR
applemac_os_x_serverMatch10.5.8
Node
applesafariRange≤4.0.3
OR
applesafariMatch0.8
OR
applesafariMatch0.9
OR
applesafariMatch1.0
OR
applesafariMatch1.0beta
OR
applesafariMatch1.0beta2
OR
applesafariMatch1.0.0
OR
applesafariMatch1.0.0b1
OR
applesafariMatch1.0.0b2
OR
applesafariMatch1.0.1
OR
applesafariMatch1.0.2
OR
applesafariMatch1.0.3
OR
applesafariMatch1.1.0
OR
applesafariMatch1.1.1
OR
applesafariMatch1.2
OR
applesafariMatch1.2.0
OR
applesafariMatch1.2.1
OR
applesafariMatch1.2.2
OR
applesafariMatch1.2.3
OR
applesafariMatch1.2.4
OR
applesafariMatch1.2.5
OR
applesafariMatch1.3
OR
applesafariMatch1.3.0
OR
applesafariMatch1.3.1
OR
applesafariMatch1.3.2
OR
applesafariMatch2
OR
applesafariMatch2.0
OR
applesafariMatch2.0.0
OR
applesafariMatch2.0.1
OR
applesafariMatch2.0.2
OR
applesafariMatch2.0.3
OR
applesafariMatch2.0.3417.8
OR
applesafariMatch2.0.3417.9
OR
applesafariMatch2.0.3417.9.2
OR
applesafariMatch2.0.3417.9.3
OR
applesafariMatch2.0.3_417.9.3
OR
applesafariMatch2.0.4
OR
applesafariMatch2.0.4_419.3
OR
applesafariMatch2.0_pre
OR
applesafariMatch3
OR
applesafariMatch3.0
OR
applesafariMatch3.0.0
OR
applesafariMatch3.0.0b
OR
applesafariMatch3.0.1
OR
applesafariMatch3.0.1beta
OR
applesafariMatch3.0.1b
OR
applesafariMatch3.0.2
OR
applesafariMatch3.0.2b
OR
applesafariMatch3.0.3
OR
applesafariMatch3.0.3b
OR
applesafariMatch3.0.4
OR
applesafariMatch3.0.4_beta
OR
applesafariMatch3.0.4b
OR
applesafariMatch3.1
OR
applesafariMatch3.1.0
OR
applesafariMatch3.1.0b
OR
applesafariMatch3.1.1
OR
applesafariMatch3.1.2
OR
applesafariMatch3.2
OR
applesafariMatch3.2.0
OR
applesafariMatch3.2.1
OR
applesafariMatch3.2.2
OR
applesafariMatch3.2.3
OR
applesafariMatch4.0
OR
applesafariMatch4.0beta
OR
applesafariMatch4.0.0b
OR
applesafariMatch4.0.1
OR
applesafariMatch4.0.2
AND
microsoftwindows

Related

prion 1
cvelist 1
cve 1
nessus 4
seebug 2
threatpost 1
openvas 2
prion
prion
Integer overflow
2009-09-14 16:30:00
cvelist
cvelist
CVE-2009-2804
2009-09-14 16:00:00
cve
cve
CVE-2009-2804
2009-09-14 16:30:00
nessus
nessus
Safari < 4.0.4 Multiple Vulnerabilities
2009-11-12 00:00:00
Safari < 4.0.4 Multiple Vulnerabilities
2009-11-11 00:00:00
Safari < 4.0.4 Multiple Vulnerabilities
2009-11-11 00:00:00
seebug
seebug
Safari 4.0.4版本修复多个安全漏洞
2009-11-13 00:00:00
Apple Mac OS X 2009-005更新修复多个安全漏洞
2009-09-16 00:00:00
threatpost
threatpost
Apple Patches Critical Safari Vulnerabilities
2009-11-11 21:45:09
openvas
openvas
Mac OS X Security Update 2009-005
2010-05-12 00:00:00
Mac OS X Security Update 2009-005
2010-05-12 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

High

0.024 Low

EPSS

Percentile

90.1%

JSON
Related for NVD:CVE-2009-2804
prion1cvelist1cve1nessus4seebug2threatpost1openvas2