CVE-2007-2386

2007-05-2422:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-2386

buffer overflow

mdnsresponder

apple

mac os x

denial of service

remote attack

arbitrary code

upnp

igd

nvd

7.6 High

AI Score

Confidence

Low

9.4 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:N/A:C

0.418 Medium

EPSS

Percentile

97.3%

JSON

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.

CPENameOperatorVersion
apple:mac_os_xapple mac os xeq10.4.3
apple:mac_os_xapple mac os xeq10.4.1
apple:mac_os_xapple mac os xeq10.4.7
apple:mac_os_xapple mac os xeq10.4.4
apple:mac_os_xapple mac os xeq10.4
apple:mac_os_xapple mac os xeq10.4.6
apple:mac_os_xapple mac os xeq10.4.5
apple:mac_os_xapple mac os xeq10.4.8
apple:mac_os_xapple mac os xeq10.4.2

CPE	Name	Operator	Version
apple:mac_os_x	apple mac os x	eq	10.4.3
apple:mac_os_x	apple mac os x	eq	10.4.1
apple:mac_os_x	apple mac os x	eq	10.4.7
apple:mac_os_x	apple mac os x	eq	10.4.4
apple:mac_os_x	apple mac os x	eq	10.4
apple:mac_os_x	apple mac os x	eq	10.4.6
apple:mac_os_x	apple mac os x	eq	10.4.5
apple:mac_os_x	apple mac os x	eq	10.4.8
apple:mac_os_x	apple mac os x	eq	10.4.2