About the security content of Security Update 2009-001 - Apple Support

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

• CVE-2006-3467n/a: security vulnerability
• CVE-2006-1861n/a: security vulnerability
• CVE-2007-4965n/a: Integer Overflow or Wraparound
• CVE-2007-4565n/a: security vulnerability
• CVE-2007-1667n/a: security vulnerability
• CVE-2007-1352n/a: security vulnerability
• CVE-2007-1351n/a: security vulnerability
• CVE-2008-5314n/a: security vulnerability
• CVE-2008-5031n/a: security vulnerability
• CVE-2008-5183n/a: NULL Pointer Dereference
• CVE-2008-5050n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2008-4864n/a: Integer Overflow or Wraparound
• CVE-2008-3663n/a: security vulnerability
• CVE-2008-3142n/a: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
• CVE-2008-3144n/a: Integer Overflow or Wraparound
• CVE-2008-2711n/a: Improper Input Validation
• CVE-2008-2360n/a: security vulnerability
• CVE-2008-2379n/a: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
• CVE-2008-2361n/a: security vulnerability
• CVE-2008-2316n/a: security vulnerability
• CVE-2008-2362n/a: security vulnerability
• CVE-2008-2315n/a: Integer Overflow or Wraparound
• CVE-2008-1927n/a: security vulnerability
• CVE-2008-1887n/a: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
• CVE-2008-1807n/a: security vulnerability
• CVE-2008-1806n/a: security vulnerability
• CVE-2008-1808n/a: security vulnerability
• CVE-2008-1721n/a: Incorrect Conversion between Numeric Types
• CVE-2008-1679n/a: Integer Overflow or Wraparound
• CVE-2008-1379n/a: security vulnerability
• CVE-2008-1377n/a: security vulnerability
• CVE-2009-0138servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration
• CVE-2009-0141XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user
• CVE-2009-0142Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vectors related to "file enumeration logic."
• CVE-2009-0139n/a: security vulnerability
• CVE-2009-0137n/a: Improper Input Validation
• CVE-2009-0140n/a: security vulnerability
• CVE-2009-0017n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2009-0009n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer
• CVE-2009-0015n/a: security vulnerability
• CVE-2009-0013n/a: security vulnerability
• CVE-2009-0020n/a: security vulnerability
• CVE-2009-0012Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string
• CVE-2009-0018The Remote Apple Events server in Apple Mac OS X 10.4.11 and 10.5.6 does not properly initialize a buffer, which allows remote attackers to read portions of memory
• CVE-2009-0011Certificate Assistant in Apple Mac OS X 10.5.6 allows local users to overwrite arbitrary files via unknown vectors related to an "insecure file operation" on a temporary file
• CVE-2009-0014n/a: security vulnerability
• CVE-2009-0019n/a: Improper Restriction of Operations within the Bounds of a Memory Buffer

Source and provenance

Original title: About the security content of Security Update 2009-001 - Apple Support. Captured 18 Oct 2026, 08:07 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.