CVE-2009-1717
Apple Mac OS X 10.5 < 10.5.7 - Remote Code Execution via xterm Resize Escape Sequence
Title source: llmDescription
Integer overflow in Terminal in Apple Mac OS X 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted size value in a CSI[4 xterm resize escape sequence that triggers a heap-based buffer overflow.
References (6)
Core 6
Core References
Patch, Vendor Advisory x_refsource_confirm
http://support.apple.com/kb/HT3549
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/35182
Patch vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1022322
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/50982
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/504031/100/0/threaded
Vendor Advisory x_refsource_misc
http://dvlabs.tippingpoint.com/advisory/TPTI-09-04
Scores
EPSS
0.0302
EPSS Percentile
86.1%
Details
CWE
CWE-189
Status
published
Products (16)
apple/mac_os_x
10.5
apple/mac_os_x
10.5.0
apple/mac_os_x
10.5.1
apple/mac_os_x
10.5.2
apple/mac_os_x
10.5.3
apple/mac_os_x
10.5.4
apple/mac_os_x
10.5.5
apple/mac_os_x
10.5.6
apple/mac_os_x_server
10.5
apple/mac_os_x_server
10.5.0
... and 6 more
Published
Jun 05, 2009
Tracked Since
Feb 18, 2026