VULNERABILITY INTELLIGENCE
CVE-2009-1041
CVSS score7.2 HIGH
EPSS probability0.78%
CISA KEVNot currently listed
Published2009-03-26
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
The ktimer feature (sys/kern/kern_time.c) in FreeBSD 7.0, 7.1, and 7.2 allows local users to overwrite arbitrary kernel memory via an out-of-bounds timer value.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer