Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

Apple Mac OS X and iPhone can be crashed or hijacked by malicious PDF

CVE-2009-0145 · published 17 years ago
Summary

Older versions of Mac OS X (10.4.11 and early 10.5) and early iPhone and iPod touch operating systems can be tricked by a specially crafted PDF file. The file can cause the program to stop working or let an attacker run their own code on the device. Update to the latest system software or avoid opening untrusted PDF files to protect your devices.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
apple mac_os_x 10.4.11
10.5.0
10.5.1
10.5.2
10.5.3
10.5.4
10.5.5
10.5.6
cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*
apple mac_os_x_server 10.4.11
10.5.0
10.5.1
10.5.2
10.5.3
10.5.4
10.5.6
cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*
Original advisory text
CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause...
CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers memory corruption.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.8 Medium
Exploitation
5% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published13 May 2009
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2009-0145 · NVD
Track software like this
Free during beta