CVE Vulnerability

CVE-2007-0613

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

Scope

References
Link Resource
http://projects.info-pull.com/moab/MOAB-29-01-2007.html Exploit Vendor Advisory
http://www.securityfocus.com/bid/22304 Exploit
http://www.osvdb.org/32699
http://www.osvdb.org/32698
Configurations

Configuration 1

cpe:2.3:a:apple:instant_message_framework:428:*:*:*:*:*:*:*
cpe:2.3:a:apple:ichat:3.1.6:*:*:*:*:*:*:*
cpe:2.3:a:apple:mdnsresponder:*:*:*:*:*:*:*:*
Information

Published : 2007-01-31 11:28

Updated : 2008-09-05 09:18

NVD link : CVE-2007-0613

Mitre link : CVE-2007-0613

Products Affected
No products.
CWE
NVD-CWE-Other