CVE-2009-2483

Published: Jul 16, 2009Modified: Apr 23, 2026

4.9

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 3.9 / Impact: 6.9

Source: NVD

Description

libprop/prop_object.c in proplib in NetBSD 4.0 and 4.0.1 allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via a malformed externalized plist (XML form) containing an undefined element.

Affected (2)

Products: Netbsd: Netbsd

Netbsd

1 product

Netbsd

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Netbsd Netbsd	Version 4.0.1
Netbsd Netbsd	Version 4.0

Related CWEs

CWE-189

References (12)

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc (unsafe URL)

Source: cve@mitre.org

http://osvdb.org/55285

Source: cve@mitre.org

http://secunia.com/advisories/35556

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/35466

Source: cve@mitre.org

http://www.securitytracker.com/id?1022431

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/51311

Source: cve@mitre.org

ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2009-003.txt.asc (unsafe URL)