Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-2809
HistorySep 14, 2009 - 12:00 a.m.

CVE-2009-2809

2009-09-1400:00:00
ubuntu.com
ubuntu.com
16

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.034

Percentile

91.4%

ImageIO in Apple Mac OS X 10.4.11 and 10.5.8 allows remote attackers to
execute arbitrary code or cause a denial of service (application crash) via
a crafted PixarFilm encoded TIFF image, related to “multiple memory
corruption issues.”

Notes

Author Note
jdstrand might be Apple specific
kees seems to be only in ImageIO

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.034

Percentile

91.4%