CVE-2009-0154: Buffer Overflow
Published May 13, 2009
·Updated
Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format (CFF) font.
Affected Software
16 affected components
Apple Mac OS X Server=10.5.2
Apple iOS and macOS=10.5.6
Apple Mac OS X Server=10.4.11
Apple iOS and macOS=10.5.5
Apple Mac OS X Server=10.5.5
Apple iOS and macOS=10.5.1
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.5.6
Apple iOS and macOS=10.5.3
Apple iOS and macOS=10.5.0
Apple Mac OS X Server=10.5.0
Apple Mac OS X Server=10.5.3
Apple Mac OS X Server=10.5.4
Apple iOS and macOS=10.5.2
Apple iOS and macOS=10.4.11
Apple iOS and macOS=10.5.4
Remediation
Patch Available
Event History
May 13, 2009
CVE Published
via MITRE·03:14 PM
Data Sourced
via MITRE·03:14 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-0154?
CVE-2009-0154 has been rated as a critical vulnerability due to the ability to execute arbitrary code remotely.
2
How do I fix CVE-2009-0154?
To fix CVE-2009-0154, users should update their systems to at least Mac OS X 10.5.7 to close this vulnerability.
3
What platforms are affected by CVE-2009-0154?
CVE-2009-0154 affects Apple Mac OS X versions 10.4.11 and 10.5.x prior to 10.5.7.
4
What kind of attack exploits CVE-2009-0154?
CVE-2009-0154 can be exploited through a crafted Compact Font Format font file.
5
Can CVE-2009-0154 lead to data loss?
Yes, CVE-2009-0154 can potentially lead to data loss as it allows remote attackers to execute arbitrary code.