CVE-2009-0001(apple / mac_os_x)

LOWCVSS 9.3 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap-based buffer overflow in Apple QuickTime before 7.6 allows remote attackers to cause a denial of service (application termination) and possibly execute arbitrary code via a crafted RTSP URL.

apple CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Patch / fix

Other references

Weakness type (CWE)

CWE-119

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mac_os_x
quicktime
windows_vista
windows_xp

Threat summary

2 mentions across 1 observed day

What's happening

2 total mentions across 1 day

Affected systems

Vendors

apple microsoft

Products

mac_os_xquicktimewindows_vistawindows_xp

39 versions affected across 4 products

Deep dive

Activity timeline2 mentions / 1d

Referenced assets1 URL

By indicator

https://github.com/CVEProject/cvelistV5/blob/main/cves/2009/0xxx/CVE-2009-0001.json

Full discourse2 posts

🇰🇷Dave_Joe_9377🇦🇺@Dave_Joe_937716h
CVE-2009-0001 | A streaming link that overflows memory Think of a URL as an address label. A media player must read that label before it can use it. In Apple's QuickTime before 7.6, a crafted RTSP streaming URL could overflow a buffer on the heap, an area of memory used by the program. The result could be an app crash and possibly attacker-controlled code execution. Not every crash means control was gained. The lesson: even a link is untrusted input that software must handle safely.
2000116
3.2K followersView on X
🇰🇷Dave_Joe_9377🇦🇺@Dave_Joe_937716h
This was a heap-based buffer overflow in Apple's QuickTime. The CVE describes possible code execution, not a guarantee that every crash gives control. Lesson: keep media software supported and updated. Official record: https://github.com/CVEProject/cvelistV5/blob/main/cves/2009/0xxx/CVE-2009-0001.json
000017
3.2K followersView on X

CPE platform detail43 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

43 of 43 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	mac_os_x	10.4.9	-	-
OS	apple	mac_os_x	10.5	-	-
OS	apple	mac_os_x	10.5.1	-	-
OS	apple	mac_os_x	10.5.2	-	-
OS	apple	mac_os_x	10.5.3	-	-
OS	apple	mac_os_x	10.5.4	-	-
OS	apple	mac_os_x	10.5.5	-	-
App	apple	quicktime	-	-	-
App	apple	quicktime	-	-	-
App	apple	quicktime	3.0	-	-
App	apple	quicktime	4.1.2	-	-
App	apple	quicktime	5.0	-	-
App	apple	quicktime	5.0.1	-	-
App	apple	quicktime	5.0.2	-	-
App	apple	quicktime	6.0	-	-
App	apple	quicktime	6.1	-	-
App	apple	quicktime	6.5	-	-
App	apple	quicktime	6.5.1	-	-
App	apple	quicktime	6.5.2	-	-
App	apple	quicktime	7.0	-	-
App	apple	quicktime	7.0.1	-	-
App	apple	quicktime	7.0.2	-	-
App	apple	quicktime	7.0.3	-	-
App	apple	quicktime	7.0.4	-	-
App	apple	quicktime	7.1	-	-
App	apple	quicktime	7.1.1	-	-
App	apple	quicktime	7.1.2	-	-
App	apple	quicktime	7.1.3	-	-
App	apple	quicktime	7.1.4	-	-
App	apple	quicktime	7.1.5	-	-
App	apple	quicktime	7.1.6	-	-
App	apple	quicktime	7.2	-	-
App	apple	quicktime	7.3	-	-
App	apple	quicktime	7.3.1	-	-
App	apple	quicktime	7.3.1.70	-	-
App	apple	quicktime	7.4	-	-
App	apple	quicktime	7.4.1	-	-
App	apple	quicktime	7.4.4	-	-
App	apple	quicktime	7.4.5	-	-
App	apple	quicktime	7.5	-	-
OS	microsoft	windows_vista	-	-	-
OS	microsoft	windows_xp	-	-	-
OS	microsoft	windows_xp	-	-	-

Explore more

Back to dashboard apple CVEs microsoft CVEs mac_os_x vulnerabilities