CVE-2008-2326 mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a....
MediumCVSS 5.0
EPSS 7.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple bonjour | = 1.0.4-unknown | No fix listed |
References
- APPLE-SA-2009-09-09 vendor-advisory
- 31822 third-party-advisory
- support.apple.com
- 31091 patch vdb-entry
- 1020845 vdb-entry
- ADV-2008-2524 vdb-entry
- apple-bonjour-mdnsresponder-dos(45005) vdb-entry