# CVEs published 2009-05-13 20 CVEs were published on May 13, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-0945](https://cve.now/CVE-2009-0945.md): Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through… (no CVSS) - [CVE-2008-1517](https://cve.now/CVE-2008-1517.md): Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of… (no CVSS) - [CVE-2009-0010](https://cve.now/CVE-2009-0010.md): Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote… (no CVSS) - [CVE-2009-0144](https://cve.now/CVE-2009-0144.md): CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to… (no CVSS) - [CVE-2009-0145](https://cve.now/CVE-2009-0145.md): CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1… (no CVSS) - [CVE-2009-0149](https://cve.now/CVE-2009-0149.md): Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by… (no CVSS) - [CVE-2009-0150](https://cve.now/CVE-2009-0150.md): Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service… (no CVSS) - [CVE-2009-0152](https://cve.now/CVE-2009-0152.md): iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are… (no CVSS) - [CVE-2009-0153](https://cve.now/CVE-2009-0153.md): International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0… (no CVSS) - [CVE-2009-0154](https://cve.now/CVE-2009-0154.md): Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to… (no CVSS) - [CVE-2009-0155](https://cve.now/CVE-2009-0155.md): Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1… (no CVSS) - [CVE-2009-0156](https://cve.now/CVE-2009-0156.md): Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder… (no CVSS) - [CVE-2009-0157](https://cve.now/CVE-2009-0157.md): Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause… (no CVSS) - [CVE-2009-0158](https://cve.now/CVE-2009-0158.md): Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code… (no CVSS) - [CVE-2009-0160](https://cve.now/CVE-2009-0160.md): QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of… (no CVSS) - [CVE-2009-0161](https://cve.now/CVE-2009-0161.md): The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP… (no CVSS) - [CVE-2009-0162](https://cve.now/CVE-2009-0162.md): Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows… (no CVSS) - [CVE-2009-0942](https://cve.now/CVE-2009-0942.md): Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a… (no CVSS) - [CVE-2009-0943](https://cve.now/CVE-2009-0943.md): Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book… (no CVSS) - [CVE-2009-0944](https://cve.now/CVE-2009-0944.md): The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2009-05-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.