CVE-2009-1237: Medium severity Apple iOS and macOS vulnerability
Published Apr 2, 2009
·Updated
Multiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow local users to cause a denial of service (kernel memory consumption) via a crafted (1) SYSaddprofil or (2) SYSmacgetfsstat system call.
Affected Software
114 affected components
Apple iOS and macOS=10.4.3
Apple Mac OS X Server=10.4.3
Apple Mac OS X Server=10.3.2
Apple Mac OS X Server=10.1.5
Apple Mac OS X Server=10.1
Apple Mac OS X Server=10.3.0
Apple iOS and macOS=10.2.5
Apple Mac OS X Server=10.2.2
Apple iOS and macOS=10.5.2-2008-002
Apple iOS and macOS=10.2.7
Apple iOS and macOS=10.0.2
Apple Mac OS X Server=10.1.1
Apple iOS and macOS=10.2.8
Apple Mac OS X Server=10.2.4
Apple Mac OS X Server=10.2.0
Apple Mac OS X Server=10.5.2
Apple Mac OS X Server=10.4.10
Apple iOS and macOS=10.2.1
Apple Mac OS X Server=10.4.9
Apple iOS and macOS=10.4.8
Apple Mac OS X Server=10.1.2
Apple Mac OS X Server=10.3.7
Apple Mac OS X Server=10.4.11
Apple Mac OS X Server=10.3.5
Apple iOS and macOS=10.3.1
Apple iOS and macOS=10.3.5
Apple iOS and macOS=10.3.0
Apple iOS and macOS=10.4.1
Apple Mac OS X Server=10.4.2
Apple iOS and macOS=10.1
Apple iOS and macOS=10.5.5
Apple Mac OS X Server=10.3.3
Apple Mac OS X Server=10.2.7
Apple Mac OS X Server=10.5.5
Apple Mac OS X Server=10.4.4
Apple iOS and macOS=10.5.1
Apple iOS and macOS=10.0.1
Apple iOS and macOS=10.4.10
Apple Mac OS X Server=10.2.3
Apple iOS and macOS=10.0.3
Apple Mac OS X Server=10.4.1
Apple iOS and macOS=10.4.9
Apple Mac OS X Server=10.5.1
Apple Mac OS X Server=10.4.0
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.1.4
Apple iOS and macOS=10.2.4
Apple iOS and macOS=10.4.7
Apple iOS and macOS=10.4.4
Apple Mac OS X Server=10.3.4
Apple iOS and macOS=10.3.2
Apple iOS and macOS=10.5.3
Apple iOS and macOS=10.5.0
Apple iOS and macOS=10.2.2
Apple Mac OS X Server=10.5.0
Apple iOS and macOS=10.0
Apple iOS and macOS=10.3.7
Apple iOS and macOS=10.0.0
Apple Mac OS X Server=10.0.4
Apple iOS and macOS=10.4.0
Apple Mac OS X Server=10.5.3
Apple iOS and macOS<=10.5.6
Apple Mac OS X Server=10.2.5
Apple iOS and macOS=10.1.0
Apple iOS and macOS=10.1.3
Apple Mac OS X Server=10.4
Apple Mac OS X Server<=10.5.6
Apple iOS and macOS=10.5
Apple Mac OS X Server=10.5.4
Apple Mac OS X Server=10.4.5
Apple iOS and macOS=10.3.6
Apple Mac OS X Server=10.3
Apple iOS and macOS=10.5.2
Apple Mac OS X Server=10.3.8
Apple iOS and macOS=10.1.5
Apple Mac OS X Server=10.0.0
Apple Mac OS X Server=10.2.6
Apple iOS and macOS=10.4
Apple iOS and macOS=10.2.0
Apple Mac OS X Server=10.4.6
Apple Mac OS X Server=10.3.9
Apple Mac OS X Server=10.0.3
Apple Mac OS X Server=10.2
Apple Mac OS X Server=10.4.8
Apple iOS and macOS=10.4.6
Apple Mac OS X Server=10.1.0
Apple iOS and macOS=10.3.8
Apple Mac OS X Server=10.2.1
Apple iOS and macOS=10.1.1
Apple Mac OS X Server=10.3.1
Apple Mac OS X Server=10.0.2
Apple Mac OS X Server=10.1.4
Apple iOS and macOS=10.4.5
Apple iOS and macOS=10.3.9
Apple iOS and macOS=10.3.4
Apple iOS and macOS=10.4.11
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.3.3
Apple iOS and macOS=10.2.6
Apple iOS and macOS=10.4.8
Apple iOS and macOS=10.2.3
Apple Mac OS X Server=10.5
Apple Mac OS X Server=10.4.7
Apple Mac OS X Server=10.0.1
Apple Mac OS X Server=10.0
Apple Mac OS X Server=10.2.8
Apple iOS and macOS=10.2
Apple iOS and macOS=10.4.2
Apple iOS and macOS=10.5.4
Apple iOS and macOS=10.3
Apple Mac OS X Server=10.3.6
Apple iOS and macOS=10.0.4
Apple Mac OS X Server=10.1.3
Apple iOS and macOS=10.1.2
Event History
Apr 2, 2009
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Data Sourced
via NVD·05:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-1237?
CVE-2009-1237 has a medium severity level due to its potential to cause denial of service through kernel memory consumption.
2
How do I fix CVE-2009-1237?
To address CVE-2009-1237, ensure your Apple Mac OS X is updated to version 10.5.7 or later, which contains patches for this vulnerability.
3
Which versions of macOS are affected by CVE-2009-1237?
CVE-2009-1237 affects Apple Mac OS X versions 10.5.6 and earlier, as well as older versions like 10.4 and 10.3.
4
What causes CVE-2009-1237?
CVE-2009-1237 is caused by multiple memory leaks in the kernel related to specific system calls, which leads to resource exhaustion.
5
Who can exploit CVE-2009-1237?
Local users with access to the affected systems can exploit CVE-2009-1237 to cause denial of service.