Vulnerability Database

314,373

Total vulnerabilities in the database

CVE-2009-0020

Unspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a crafted resource fork that triggers memory corruption.

Published: Feb 13, 2009
Updated: Nov 9, 2025
CVE: CVE-2009-0020
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C

CWEs:

CWE-399

Affected Software
References

Software	From	Fixed in
apple / mac_os_x	10.5.6	10.5.6.x
apple / mac_os_x_server	10.4.11	10.4.11.x
apple / mac_os_x_server	10.5.6	10.5.6.x
apple / mac_os_x	10.4.11	10.4.11.x

http://lists.apple.com/archives/security-announce/2009/Feb/msg00000.html
http://secunia.com/advisories/33937
http://support.apple.com/kb/HT3438
http://www.securityfocus.com/bid/33759
http://www.vupen.com/english/advisories/2009/0422

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo