CVE-2009-0948

CVE-2009-0948 describes multiple buffer overflow vulnerabilities within the cdf_read_sat, cdf_read_long_sector_chain, and cdf_read_ssat functions in Apple files prior to version 5.02. This critical vulnerability, rated 9.8 CVSS, allows for remote code execution with high impact on confidentiality, integrity, and availability, requiring no user interaction or authentication. Despite its age and high severity, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. However, the vulnerability has garnered significant community discussion, with 10 mentions, indicating continued awareness and potential interest.