CVE-2009-0152

iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network.

• CWE-312

• http://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlMailing List, Patch, Vendor Advisory
• http://secunia.com/advisories/35074Broken Link
• http://support.apple.com/kb/HT3549Patch, Vendor Advisory
• http://www.securityfocus.com/bid/34926Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022212Broken Link, Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2009/1297Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50487Third Party Advisory, VDB Entry
• http://lists.apple.com/archives/security-announce/2009/May/msg00002.htmlMailing List, Patch, Vendor Advisory
• http://secunia.com/advisories/35074Broken Link
• http://support.apple.com/kb/HT3549Patch, Vendor Advisory
• http://www.securityfocus.com/bid/34926Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1022212Broken Link, Third Party Advisory, VDB Entry
• http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2009/1297Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50487Third Party Advisory, VDB Entry

Published

May 13, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0146Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02p…
• CVE-2009-0147Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02…
• CVE-2009-0148Multiple buffer overflows in Cscope before 15.7a allow remot…
• CVE-2009-0149Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local u…
• CVE-2009-0150Stack-based buffer overflow in Apple Mac OS X 10.5 before 10…
• CVE-2009-0151The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.…
• CVE-2009-0153International Components for Unicode (ICU) 4.0, 3.6, and oth…
• CVE-2009-0154Heap-based buffer overflow in Apple Type Services (ATS) in A…
• CVE-2009-0155Integer underflow in CoreGraphics in Apple Mac OS X 10.5 bef…
• CVE-2009-0156Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10…
• CVE-2009-0157Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10…
• CVE-2009-0158Stack-based buffer overflow in telnet in Apple Mac OS X 10.4…