CVE-2009-0160: Code Injection
Published May 13, 2009
·Updated
QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image that triggers memory corruption.
Affected Software
16 affected components
Apple Mac OS X Server=10.5.2
Apple iOS and macOS=10.5.6
Apple Mac OS X Server=10.4.11
Apple iOS and macOS=10.5.5
Apple Mac OS X Server=10.5.5
Apple iOS and macOS=10.5.1
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.5.6
Apple iOS and macOS=10.5.3
Apple iOS and macOS=10.5.0
Apple Mac OS X Server=10.5.0
Apple Mac OS X Server=10.5.3
Apple Mac OS X Server=10.5.4
Apple iOS and macOS=10.5.2
Apple iOS and macOS=10.4.11
Apple iOS and macOS=10.5.4
Remediation
Patch Available
Event History
May 13, 2009
CVE Published
via MITRE·03:14 PM
Data Sourced
via MITRE·03:14 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-0160?
CVE-2009-0160 is considered a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2009-0160?
To mitigate CVE-2009-0160, users should update their Apple Mac OS X software to version 10.5.7 or later.
3
What is the impact of CVE-2009-0160?
The impact of CVE-2009-0160 includes the possibility of arbitrary code execution or an application crash.
4
Which versions are affected by CVE-2009-0160?
CVE-2009-0160 affects Apple Mac OS X versions 10.4.11 and 10.5.0 through 10.5.6.
5
Who is potentially affected by CVE-2009-0160?
Users of Apple Mac OS X versions specified in CVE-2009-0160 are at risk of exploitation from remote attacks.