CVE-2009-1728 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2009-1728

Modified

More Info Official Page

Source-cve@mitre.org

Published At-06 Aug, 2009 | 16:30

Updated At-23 Apr, 2026 | 00:35

Stack-based buffer overflow in Image RAW in Apple Mac OS X 10.5 before 10.5.8, and 10.4 before Digital Camera RAW Compatibility Update 2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Canon RAW image.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

>>mac_os_x>>10.5.6

cpe:2.3:a:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*

>>mac_os_x>>10.5

cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*

>>mac_os_x>>10.5.0

cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*

>>mac_os_x>>10.5.1

cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*

>>mac_os_x>>10.5.2

cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*

>>mac_os_x>>10.5.3

cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*

>>mac_os_x>>10.5.4

cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*

>>mac_os_x>>10.5.5

cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*

>>mac_os_x>>10.5.6

cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*

>>mac_os_x>>10.5.7

cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5

cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.0

cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.1

cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.2

cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.3

cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.4

cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.5

cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.6

cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*

>>mac_os_x_server>>10.5.7

cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*

>>mac_os_x>>10.4

cpe:2.3:o:apple:mac_os_x:10.4:*:*:*:*:*:*:*

>>mac_os_x>>10.4.0

cpe:2.3:o:apple:mac_os_x:10.4.0:*:*:*:*:*:*:*

>>mac_os_x>>10.4.1

cpe:2.3:o:apple:mac_os_x:10.4.1:*:*:*:*:*:*:*

>>mac_os_x>>10.4.2

cpe:2.3:o:apple:mac_os_x:10.4.2:*:*:*:*:*:*:*

>>mac_os_x>>10.4.3

cpe:2.3:o:apple:mac_os_x:10.4.3:*:*:*:*:*:*:*

>>mac_os_x>>10.4.4

cpe:2.3:o:apple:mac_os_x:10.4.4:*:*:*:*:*:*:*

>>mac_os_x>>10.4.5

cpe:2.3:o:apple:mac_os_x:10.4.5:*:*:*:*:*:*:*

>>mac_os_x>>10.4.6

cpe:2.3:o:apple:mac_os_x:10.4.6:*:*:*:*:*:*:*

>>mac_os_x>>10.4.7

cpe:2.3:o:apple:mac_os_x:10.4.7:*:*:*:*:*:*:*

>>mac_os_x>>10.4.8

cpe:2.3:o:apple:mac_os_x:10.4.8:*:*:*:*:*:*:*

>>mac_os_x>>10.4.10

cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*

>>mac_os_x>>10.4.11

cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4

cpe:2.3:o:apple:mac_os_x_server:10.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.0

cpe:2.3:o:apple:mac_os_x_server:10.4.0:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.1

cpe:2.3:o:apple:mac_os_x_server:10.4.1:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.2

cpe:2.3:o:apple:mac_os_x_server:10.4.2:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.3

cpe:2.3:o:apple:mac_os_x_server:10.4.3:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.4

cpe:2.3:o:apple:mac_os_x_server:10.4.4:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.5

cpe:2.3:o:apple:mac_os_x_server:10.4.5:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.6

cpe:2.3:o:apple:mac_os_x_server:10.4.6:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.7

cpe:2.3:o:apple:mac_os_x_server:10.4.7:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.8

cpe:2.3:o:apple:mac_os_x_server:10.4.8:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.9

cpe:2.3:o:apple:mac_os_x_server:10.4.9:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.10

cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*

>>mac_os_x_server>>10.4.11

cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html	cve@mitre.org	Patch Vendor Advisory
http://osvdb.org/56843	cve@mitre.org	N/A
http://secunia.com/advisories/36096	cve@mitre.org	Vendor Advisory
http://support.apple.com/kb/HT3757	cve@mitre.org	Patch Vendor Advisory
http://www.securityfocus.com/bid/35954	cve@mitre.org	Patch
http://www.securitytracker.com/id?1022674	cve@mitre.org	N/A
http://www.us-cert.gov/cas/techalerts/TA09-218A.html	cve@mitre.org	US Government Resource
http://www.vupen.com/english/advisories/2009/2172	cve@mitre.org	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52423	cve@mitre.org	N/A
http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://osvdb.org/56843	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/36096	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://support.apple.com/kb/HT3757	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.securityfocus.com/bid/35954	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.securitytracker.com/id?1022674	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.us-cert.gov/cas/techalerts/TA09-218A.html	af854a3a-2127-422b-91ae-364da2661108	US Government Resource
http://www.vupen.com/english/advisories/2009/2172	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/52423	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://osvdb.org/56843

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/36096

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT3757

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/35954

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1022674

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-218A.html

Source: cve@mitre.org

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2009/2172

Source: cve@mitre.org

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/52423

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://osvdb.org/56843

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://secunia.com/advisories/36096

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://support.apple.com/kb/HT3757

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: http://www.securityfocus.com/bid/35954

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1022674

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA09-218A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

US Government Resource

Hyperlink: http://www.vupen.com/english/advisories/2009/2172

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/52423

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A