# CVEs published 2009-05-13 20 CVEs were published on May 13, 2009: 0 critical, 0 high. Days are UTC. - [CVE-2009-0945](https://cve.now/CVE-2009-0945.md): Array index error in the insertItemBefore method in WebKit, as used in Apple Safari before 3.2.3 and 4 Public Beta, iPhone OS 1.0 through 2. (no CVSS) - [CVE-2008-1517](https://cve.now/CVE-2008-1517.md): Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of s (no CVSS) - [CVE-2009-0010](https://cve.now/CVE-2009-0010.md): Integer underflow in QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, and Apple QuickTime before 7.6.2, allows remote att (no CVSS) - [CVE-2009-0144](https://cve.now/CVE-2009-0144.md): CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obt (no CVSS) - [CVE-2009-0145](https://cve.now/CVE-2009-0145.md): CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 a (no CVSS) - [CVE-2009-0149](https://cve.now/CVE-2009-0149.md): Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by atte (no CVSS) - [CVE-2009-0150](https://cve.now/CVE-2009-0150.md): Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (applica (no CVSS) - [CVE-2009-0152](https://cve.now/CVE-2009-0152.md): iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inco (no CVSS) - [CVE-2009-0153](https://cve.now/CVE-2009-0153.md): International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 thr (no CVSS) - [CVE-2009-0154](https://cve.now/CVE-2009-0154.md): Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute (no CVSS) - [CVE-2009-0155](https://cve.now/CVE-2009-0155.md): Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 throug (no CVSS) - [CVE-2009-0156](https://cve.now/CVE-2009-0156.md): Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder cra (no CVSS) - [CVE-2009-0157](https://cve.now/CVE-2009-0157.md): Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a (no CVSS) - [CVE-2009-0158](https://cve.now/CVE-2009-0158.md): Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or (no CVSS) - [CVE-2009-0160](https://cve.now/CVE-2009-0160.md): QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of se (no CVSS) - [CVE-2009-0161](https://cve.now/CVE-2009-0161.md): The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP ce (no CVSS) - [CVE-2009-0162](https://cve.now/CVE-2009-0162.md): Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows (no CVSS) - [CVE-2009-0942](https://cve.now/CVE-2009-0942.md): Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that certain Cascading Style Sheets (CSS) are located in a regi (no CVSS) - [CVE-2009-0943](https://cve.now/CVE-2009-0943.md): Help Viewer in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not verify that HTML pathnames are located in a registered help book, whic (no CVSS) - [CVE-2009-0944](https://cve.now/CVE-2009-0944.md): The Microsoft Office Spotlight Importer in Spotlight in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 does not properly validate Microsoft O (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2009-05-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.