apple mdnsresponder vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote malicious users to cause a denial of service (disrupted com...

Apple Ichat 3.1.6 Apple Instant Message Framework 428 Apple Mdnsresponder

1 EDB exploit

7.5

CVSSv2

The handle_regservice_request function in mDNSResponder prior to 625.41.2 allows remote malicious users to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.

Apple Mac Os X Apple Watchos Apple Iphone Os Apple Airport Base Station Firmware Apple Mdnsresponder

6.8

CVSSv2

Multiple buffer overflows in mDNSResponder prior to 625.41.2 allow remote malicious users to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.

Apple Mac Os X Apple Watchos Apple Iphone Os Apple Airport Base Station Firmware Apple Mdnsresponder

9.4

CVSSv2

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote malicious users to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.

Apple Mac Os X 10.4.1 Apple Mac Os X 10.4.2 Apple Mac Os X 10.4.6 Apple Mac Os X 10.4.7 Apple Mac Os X 10.4 Apple Mac Os X 10.4.8 Apple Mac Os X 10.4.3 Apple Mac Os X 10.4.4 Apple Mac Os X 10.4.5

1 EDB exploit

5

CVSSv2

mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows prior to 1.0.5 allows malicious users to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.

Apple Bonjour 1.0.4

1 EDB exploit

10

CVSSv2

Unspecified vulnerability in mDNSResponder in Apple Mac OS X allows remote malicious users to execute arbitrary code via unspecified vectors, a related issue to CVE-2007-2386.

Apple Mac Os X 10.4.1 Apple Mac Os X 10.4.2 Apple Mac Os X 10.4.4 Apple Mac Os X 10.4.9 Apple Mac Os X 10.4.5 Apple Mac Os X 10.4.6 Apple Mac Os X 10.4.7 Apple Mac Os X 10.4.8 Apple Mac Os X 10.4 Apple Mac Os X 10.4.10 Apple Mac Os X 10.4.3

5.8

CVSSv2

Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on Apple Mac OS X 10.4.10 prior to 20070731 allows network-adjacent remote malicious users to execute arbitrary code via a crafted packet.

1 Article

7.8

CVSSv2

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote malicious users to cause a denial of service (persistent application crash) via a crafted phsh hash attribute in a TXT key.

Apple Instant Message Framework 428 Apple Ichat 3.1.6 Apple Mac Os X 10.4.8

1 EDB exploit

9.3

CVSSv2

The Application Firewall in Apple Mac OS X 10.5, when "Block all incoming connections" is enabled, does not prevent root processes or mDNSResponder from accepting connections, which might allow remote attackers or local root processes to bypass intended access restricti...

Apple Mac Os X Server 10.5 Apple Mac Os X 10.5

4.3

CVSSv2

mDNSResponder in Apple OS X prior to 10.12, when VMnet.framework is used, arranges for a DNS proxy to listen on all interfaces, which allows remote malicious users to obtain sensitive information by sending a DNS query to an unintended interface.

Apple Mac Os X

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook