CVE-2009-0152: iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in ce...

Security readout for executives and security teams

This flaw could make iChat send AIM traffic without SSL even when SSL was required. An attacker able to monitor the network could capture sensitive chat-related information. The issue applies to Apple Mac OS X 10.5 before 10.5.7, based on the CVE description. Exposure is most likely limited to legacy Mac OS X 10.5 systems using iChat with AIM. Systems not using iChat AIM communication are less likely to be affected. The bundle lists affected vendor and product as n/a, so asset validation is required. Treat this as a legacy confidentiality risk, not a current emergency based on the supplied evidence. Prioritize discovery and retirement or patching of old Mac OS X 10.5 systems, especially where sensitive communications could have used iChat AIM. Mitigation focus: Update Mac OS X 10.5 systems to 10.5.7 or later where applicable.; Check Apple advisory HT3549 and APPLE-SA-2009-05-12 for vendor guidance.; Disable or avoid iChat AIM use on unpatched legacy systems..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.