First published: Wed May 13 2009(Updated: )
Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image that triggers memory corruption.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Apple macOS Server | =10.5.2 | |
Apple iOS and macOS | =10.5.6 | |
Apple macOS Server | =10.4.11 | |
Apple iOS and macOS | =10.5.5 | |
Apple macOS Server | =10.5.5 | |
Apple iOS and macOS | =10.5.1 | |
Apple macOS Server | =10.5.1 | |
Apple macOS Server | =10.5.6 | |
Apple iOS and macOS | =10.5.3 | |
Apple iOS and macOS | =10.5.0 | |
Apple macOS Server | =10.5.0 | |
Apple macOS Server | =10.5.3 | |
Apple macOS Server | =10.5.4 | |
Apple iOS and macOS | =10.5.2 | |
Apple iOS and macOS | =10.4.11 | |
Apple iOS and macOS | =10.5.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2009-0149 has a medium severity rating as it allows local users to gain elevated privileges or crash applications.
To fix CVE-2009-0149, users should update their Mac OS X to version 10.5.7 or later.
CVE-2009-0149 affects Mac OS X versions 10.4.11 and 10.5.0 through 10.5.6.
CVE-2009-0149 cannot be exploited remotely as it requires local user access to trigger the vulnerability.
CVE-2009-0149 can lead to privilege escalation or denial of service due to application crashes.