cve/2009/CVE-2009-1236.md

CVE-2009-1236

Description

Heap-based buffer overflow in the AppleTalk networking stack in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allows remote attackers to cause a denial of service (system crash) via a ZIP NOTIFY (aka ZIPOP_NOTIFY) packet that overwrites a certain ifPort structure member.

POC

Reference

• http://www.digit-labs.org/files/exploits/xnu-appletalk-zip.c
• https://www.exploit-db.com/exploits/8262

Github

No PoCs found on GitHub currently.