CVE-2009-0020: High severity Apple iOS and macOS vulnerability

Published Feb 13, 2009

Updated

Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption.

Affected Software

4 affected components

Apple iOS and macOS=10.5.6

Apple Mac OS X Server=10.4.11

Apple Mac OS X Server=10.5.6

Apple iOS and macOS=10.4.11

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html

Event History

Feb 13, 2009

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·12:30 AM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0020?

CVE-2009-0020 is considered a critical vulnerability due to its ability to cause denial of service and execute arbitrary code.

How do I fix CVE-2009-0020?

To fix CVE-2009-0020, update your Apple Mac OS X systems to the latest available version provided by Apple.

What versions of Mac OS X are affected by CVE-2009-0020?

CVE-2009-0020 affects Mac OS X versions 10.4.11 and 10.5.6.

What type of attacks exploit CVE-2009-0020?

CVE-2009-0020 can be exploited by remote attackers using crafted resource forks that lead to memory corruption.

What are the potential impacts of CVE-2009-0020?

The potential impacts of CVE-2009-0020 include application termination and unauthorized execution of code.