CVE-2007-2386 Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Interne...
HighCVSS 9.4
EPSS 50.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple mac os x | = 10.4 | No fix listed |
| apple mac os x | = 10.4.1 | No fix listed |
| apple mac os x | = 10.4.2 | No fix listed |
| apple mac os x | = 10.4.3 | No fix listed |
| apple mac os x | = 10.4.4 | No fix listed |
| apple mac os x | = 10.4.5 | No fix listed |
| apple mac os x | = 10.4.6 | No fix listed |
| apple mac os x | = 10.4.7 | No fix listed |
| apple mac os x | = 10.4.8 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-06-20 vendor-advisory
- APPLE-SA-2007-05-24 vendor-advisory
- 25402 third-party-advisory
- 25745 third-party-advisory
- VU#221876 third-party-advisory us-government-resource
- 35142 vdb-entry
- 24144 vdb-entry
- 24159 vdb-entry
- 1018123 vdb-entry
- ADV-2007-1939 vdb-entry
- ADV-2007-2269 vdb-entry
- macos-mdnsresponder-upnp-bo(34493) vdb-entry