CVE-2009-1041

Freebsd - Memory Corruption

Title source: rule

Description

The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.

Exploits (1)

exploitdb WORKING POC VERIFIED

by mu-b · clocalfreebsd

https://www.exploit-db.com/exploits/8261

View Code ZIP pw:eip

References (5)

[Exploit] http://security.freebsd.org/advisories/FreeBSD-SA-09:06.ktimer.asc

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/49362

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/34196

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/8261

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1021882

Scores

EPSS 0.0010

EPSS Percentile 27.3%

Details

CWE

CWE-119

Status published

Products (3)

freebsd/freebsd 7.0 (7 CPE variants)

freebsd/freebsd 7.1 (5 CPE variants)

freebsd/freebsd 7.2

Published Mar 26, 2009

Tracked Since Feb 18, 2026