CVE-2009-0947: Integer Overflow
Drew Yao of Apple Product Security discovered several memory corruption issues in file 5.00 in the CDF parsing implementation.
The first is an integer overflow in cdfreadpropertyinfo(), and the second is an integer overflow in cdfreadsat(). Both have been assigned CVE-2009-0947.
The third issue is buffer overflows in cdfreadsat(), cdfreadlongsectorchain(), and cdfreadssat(). These issues have been assigned CVE-2009-0948.
These issues only affect file 5.00, and not earlier versions, due to introduced support for CDF (Common Document Format) files in file 5.00. Because of this, only Fedora 11 is affected by these issues.
Other sources
Multiple integer overflows in the (1) cdfreadpropertyinfo and (2) cdfreadsat functions in file before 5.02.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0947?
CVE-2009-0947 is considered to have a critical severity rating due to potential memory corruption leading to remote code execution.
How do I fix CVE-2009-0947?
To mitigate CVE-2009-0947, upgrade to a version of Apple Files that is 5.02 or later.
What causes the vulnerability in CVE-2009-0947?
CVE-2009-0947 is caused by multiple integer overflows in the cdf_read_property_info and cdf_read_sat functions.
Which versions of Apple Files are affected by CVE-2009-0947?
Apple Files versions before 5.02 are affected by CVE-2009-0947.
Can CVE-2009-0947 be exploited remotely?
Yes, CVE-2009-0947 can potentially be exploited remotely, allowing attackers to execute arbitrary code.