Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities

CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...

CVE-2007-5851

iChat in Apple Mac OS X 10.4.11 allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors...

Design/Logic Flaw

iChat in Apple Mac OS X 10.4.11 allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors...

CVE-2007-5851

CVE-2007-5851 affects Apple Mac OS X 10.4.11's iChat. The issue allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors. The OpenVAS/NVD entries reference Mac OS X Security Update 2007-009 as a remediation path, but the provided do...

CVE-2007-5851

iChat in Apple Mac OS X 10.4.11 allows network-adjacent remote attackers to automatically initiate a video connection to another user via unknown vectors...

CVE-2007-3748

Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

CVE-2007-3748

CVE-2007-3748 describes a buffer overflow in the UPnP IGD code used by iChat on macOS X 10.3.9 and 10.4.10. The issue allows network-adjacent remote attackers to execute arbitrary code by sending a crafted packet, per the connected documents. Affected component: UPnP IGD implementation in iChat. ...

CVE-2007-3748

Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

Mac OS X Multiple Vulnerabilities (Security Update 2007-007)

The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...

Mac OS X Multiple Vulnerabilities (Security Update 2007-005)

The remote host is running a version of Mac OS X 10.4 or 10.3 that does not have Security Update 2007-005 applied. This update fixes security flaws in the following applications : Alias Manager BIND CoreGraphics crontabs fetchmail file iChat mDNSResponder PPP ruby screen texinfo VPN C Tenable...

Apple Mac OS X iChat UPnP buffer overflow

Overview A vulnerabilty in the way Apple Mac OS X iChat handles specially crafted UPnP packets may allow execution of arbitrary code or denial of service. Description Apple iChat contains a vulnerability that could be exploited by an attacker on the local network when it attempts to handle...

Buffer overflow

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2390

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2390

The CVE-2007-2390 issue is a buffer overflow in Apple Mac OS X iChat’s UPnP IGD handling. Specifically, processing crafted UPnP Internet Gateway Device packets could allow a remote attacker to cause a denial of service or execute arbitrary code. Affected versions are Mac OS X 10.3.9 and 10.4.9. R...

CVE-2007-2390

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

Apple Macintosh OS X VideoConference SIP heap buffer overflow

Overview The Apple VideoConference framework contains a buffer overflow vulnerability. If exploited, this vulnerability may allow an attacker to execute code. Description Apple's VideoConference framework is used in iChat and other applications to stream video. iChat uses SIP to make and receive...

Apple iChat fails to properly handle crafted TXT key hashes

Overview A vulnerability in the way Apple iChat handles specially crafted TXT key hashes could lead to denial of service. Description Apple iChat is an instant message client for Apple Mac OS X. Apple iChat Agent is a back-end process that manages iChat sessions and available contacts. Apple...

Design/Logic Flaw

The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service persistent application crash via unspecified vectors, possibly related to CVE-2007-0614...

CVE-2007-0710

The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service persistent application crash via unspecified vectors, possibly related to CVE-2007-0614...

CVE-2007-0710

Summary (CVE-2007-0710) The Bonjour functionality in iChat on Apple Mac OS X 10.3.9 is affected. The vulnerability allows a remote attacker on the same network to cause a denial of service (persistent application crash) by triggering how iChat/Bonjour handles certain TXT records (TXT key hashes)....