medium5.0Public exploit code
CVE-2007-0613
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when ad…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities2007-01-30 · dos · osx · Verified
Impact
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Ichat | Version 3.1.6 |
| Apple | Instant Message Framework | Version 428 |
| Apple | Mdnsresponder | All versions |
References
- NVD record
- CVE.org record
- http://projects.info-pull.com/moab/MOAB-29-01-2007.html
- http://www.osvdb.org/32698
- http://www.osvdb.org/32699
- http://www.securityfocus.com/bid/22304
- http://projects.info-pull.com/moab/MOAB-29-01-2007.html
- http://www.osvdb.org/32698
- http://www.osvdb.org/32699
- http://www.securityfocus.com/bid/22304