CVE-2007-0613

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-01-31

Last modified

2024-08-07

Affected products

• Ichat (Apple)
• Instant Message Framework (Apple)
• Mdnsresponder (Apple)

References

• http://projects.info-pull.com/moab/MOAB-29-01-2007.html
• http://www.osvdb.org/32698
• http://www.osvdb.org/32699
• http://www.securityfocus.com/bid/22304