CVE-2009-0946: apple iphone_os Integer Overflow or Wraparound

CVSS: 7.5v2.0HighModified

AliasesRHSA-2009:1061DEBIAN-CVE-2009-0946DSA-1784-1

Published 17-04-2009Last modified 07-08-2024

Vulnerability summary

CVE-2009-0946 is a high (CVSS 7.5) Integer Overflow or Wraparound vulnerability in apple iphone_os. EPSS estimates a 8.54% chance of exploitation in the next 30 days, higher than 95% of scored vulnerabilities.

Overall risk

32/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

8.54%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 2

OPENSUSE-SU-2024:10172-1 OPENSUSE-SU-2024:10438-1 RHSA-2009:0329 RHSA-2009:1062

Timeline

17-04-2009
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple integer overflows in FreeType 2.3.9 and earlier allow remote attackers to execute arbitrary code via vectors related to large values in certain inputs in (1) smooth/ftsmooth.c, (2) sfnt/ttcmap.c, and (3) cff/cffload.c.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

8.54%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.54% on 19-09-2026

19-09-202619-10-2026

EPSS score

8.54%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected systems

Apple4 products

iphone_os≥ 1.0.0, ≤ 2.2.1
mac_os_x≥ 10.6.0, ≤ 10.6.4 | 10.4.11 | 10.5.8
mac_os_x_server≥ 10.6.0, ≤ 10.6.4 | 10.4.11 | 10.5.8
safari4.0

Redhat4 products

freetype< 0:2.2.1-21.el5_3
freetype-debuginfo< 0:2.2.1-21.el5_3
freetype-demos< 0:2.2.1-21.el5_3
freetype-devel< 0:2.2.1-21.el5_3

Debian2 products

freetype< 2.3.9-4.1 | < 2.2.1-5+etch4 | < 2.3.7-2+lenny1
debian_linuxEOL4.0 | 5.0 | 6.0

Canonical1 product

ubuntu_linuxEOL6.06 | 8.04 | 8.10 | 9.04

Freetype1 product

freetype≤ 2.3.9

Opensuse1 product

opensuseEOL10.3 | 11.0 | 11.1

Suse1 product

linux_enterprise_server10 | 11

7 vendors · 14 products

References

46 links

secunia.com/advisories/34967Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT3639X Refsource CONFIRMThird Party Advisory
support.apple.com/kb/HT4435X Refsource CONFIRMBroken Link
secunia.com/advisories/34913Third Party AdvisoryX Refsource SECUNIA
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=a18788b14db60ae3673f932249cd02d33a227c4eX Refsource CONFIRMPatchThird Party Advisory
www.vupen.com/english/advisories/2009/1621VDB EntryX Refsource VUPENThird Party Advisory
www.securityfocus.com/bid/34550VDB EntryX Refsource BIDThird Party Advisory
support.apple.com/kb/HT3549X Refsource CONFIRMThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2009:243Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
lists.apple.com/archives/security-announce/2009/jun/msg00002.htmlVendor AdvisoryX Refsource APPLEBroken Link

Show all 46 references

www.ubuntu.com/usn/USN-767-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-66-270268-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/35198Third Party AdvisoryX Refsource SECUNIA
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=79972af4f0485a11dcb19551356c45245749fc5bX Refsource CONFIRMPatchThird Party Advisory
secunia.com/advisories/35074Third Party AdvisoryX Refsource SECUNIA
git.savannah.gnu.org/cgit/freetype/freetype2.git/commit/?id=0545ec1ca36b27cb928128870a83e5f668980bc5X Refsource CONFIRMPatchThird Party Advisory
www.vupen.com/english/advisories/2009/1522VDB EntryX Refsource VUPENThird Party Advisory
lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
www.redhat.com/support/errata/RHSA-2009-1062.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
lists.apple.com/archives/security-announce/2009/Jun/msg00005.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
lists.apple.com/archives/security-announce/2009/May/msg00002.htmlVendor AdvisoryX Refsource APPLEMailing ListThird Party Advisory
secunia.com/advisories/35065Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2009/dsa-1784Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/35210Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200905-05.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/35379Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/show_bug.cgi?id=491384X Refsource CONFIRMIssue TrackingPatchThird Party AdvisoryREPORT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10149VDB EntrySignatureX Refsource OVALThird Party Advisory
git.savannah.gnu.org/cgit/freetype/freetype2.git/tree/ChangeLogX Refsource CONFIRMRelease NotesThird Party Advisory
lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
www.us-cert.gov/cas/techalerts/TA09-133A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.vupen.com/english/advisories/2009/1297VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/35200Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT3613X Refsource CONFIRMThird Party Advisory
www.redhat.com/support/errata/RHSA-2009-0329.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.vupen.com/english/advisories/2009/1058VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/35204Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/34723Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2009-1061.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2009:1061Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1061.jsonAdvisory
access.redhat.com/security/cve/CVE-2009-0946REPORT
www.cve.org/CVERecord?id=CVE-2009-0946Advisory
nvd.nist.gov/vuln/detail/CVE-2009-0946Advisory
security-tracker.debian.org/tracker/CVE-2009-0946Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities