CVE-2007-0613 The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts,...
MediumCVSS 5.0
EPSS 7.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple ichat | = 3.1.6 | No fix listed |
| apple instant message framework | = 428 | No fix listed |
| apple mdnsresponder | All versions | No fix listed |
References
- projects.info-pull.com exploit vendor-advisory
- 32698 vdb-entry
- 32699 vdb-entry
- 22304 exploit vdb-entry