Vulnerabilities > CVE-2009-2483 - Numeric Errors vulnerability in Netbsd 4.0/4.0.1

047910
CVSS 4.9 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
local
low complexity
netbsd
CWE-189

Summary

libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) containing an undefined element.

Vulnerable Configurations

Part Description Count
OS
Netbsd
2

Common Weakness Enumeration (CWE)