CVE-2009-1237
macOS < 10.5.6 - Denial of Service via SYS_add_profil or SYS___mac_getfsstat System Calls
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-1237. PoCs published by mu-b.
AI-analyzed exploit summary This exploit leverages a vulnerability in the `profil` system call in Apple MACOS X xnu kernels to trigger a kernel memory leak and potential denial-of-service (DoS). It repeatedly calls `add_profil` to fill kernel memory, demonstrating the flaw.
Description
Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYS_add_profil or (2) SYS___mac_getfsstat system call.
Exploits (2)
This exploit leverages a vulnerability in the `profil` system call in Apple MACOS X xnu kernels to trigger a kernel memory leak and potential denial-of-service (DoS). It repeatedly calls `add_profil` to fill kernel memory, demonstrating the flaw.
This exploit targets a kernel memory leak vulnerability in Apple MACOS X xnu versions up to 1228.3.13. It uses the `__mac_getfsstat` syscall to leak kernel memory by providing invalid buffer pointers and large buffer sizes.