117 matches found
CVE-2007-0710
Summary (CVE-2007-0710) The Bonjour functionality in iChat on Apple Mac OS X 10.3.9 is affected. The vulnerability allows a remote attacker on the same network to cause a denial of service (persistent application crash) by triggering how iChat/Bonjour handles certain TXT records (TXT key hashes)....
Apple iChat AIM URI handler format string vulnerability
Overview Apple iChat contains a format string vulnerability. This vulnerability may allow a remote, unauthenticated attacker to execute arbitary code. Description The Apple iChat AIM URI handler fails to properly sanitize user-controlled data that is supplied to a formatted output function. This...
Mac OS X Multiple Vulnerabilities (Security Update 2007-002)
The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2007-002 applied. This update fixes security flaws in the following applications : - Finder - iChat - UserNotification C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include"compat.inc";...
Apple iChat Bonjour多个拒绝服务漏洞
Apple iChat是捆绑于苹果家族操作系统的视频聊天工具。 iChat的Bonjour功能允许自动发现计算机，该功能中存在几个拒绝服务漏洞。在通过mDNS查询查找可用的联系人时没有任何限制，即使联系人不存在iChat也会添加所广播的presence.tcp记录，因此恶意用户可以广播伪造的记录导致使用Bonjour的iChat用户无法发现更多的对等端，无法进行可靠的通讯。 此外iChat代理在处理特制的TXT密钥哈希时还可能出现异常，导致向进程发送SIGTRAP信号出现崩溃。再次尝试启动iChat Bonjour功能仍会失败，因为mDNSResponder会保留特制的记录。 Apple...
MOAB-29-01-2007: Apple iChat Bonjour Multiple Denial of Service Vulnerabilities
Summary The vendor Apple provides the following description of Bonjour and iChat: Bonjour, also known as zero-configuration networking, enables automatic discovery of computers, devices, and services on IP networks. Bonjour uses industry standard IP protocols to allow devices to automatically...
Multiple Apple iChat Bonjour DoS conditions
Multiple problems because of insecure dynamic DNS usage...
CVE-2007-0614
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service persistent application crash via a crafted phsh hash attribute in a TXT key...
CVE-2007-0613
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service disrupted communication via a flood o...
Design/Logic Flaw
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service persistent application crash via a crafted phsh hash attribute in a TXT key...
Design/Logic Flaw
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service disrupted communication via a flood o...
CVE-2007-0614
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service persistent application crash via a crafted phsh hash attribute in a TXT key...
CVE-2007-0614
The CVE-2007-0614 entry concerns the Bonjour functionality in Apple Mac OS X 10.4.8, specifically in mDNSResponder, iChat 3.1.6, and the InstantMessage framework (428). The vulnerability is triggered by a crafted phsh hash attribute in a TXT DNS TXT record, leading to a denial of service via a pe...
Apple iChat Bonjour 3.1.6.441 Multiple Denial of Service Exploit
No description provided by source. !/usr/bin/ruby c 2006 Lance M. Havok lmh at info-pull.com All Rights Reserved. basic proof of concept for MOAB-29-01-2007 require 'digest/sha1' require 'rubygems' require 'net/dns/mdns-sd' bugselected = ARGV0 || "0".toi TMPARR = DNSSD = Net::DNS::MDNSSD...
MOAB-29-01-2007.rb.txt
!/usr/bin/ruby c 2006 Lance M. Havok All Rights Reserved. basic proof of concept for MOAB-29-01-2007 require 'digest/sha1' require 'rubygems' require 'net/dns/mdns-sd' bugselected = ARGV0 || "0".toi TMPARR = DNSSD = Net::DNS::MDNSSD trap"INT" puts "++ Exiting..." begin TMPARR.each do |o| o.stop e...
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities !/usr/bin/ruby c 2006 Lance M. Havok All Rights Reserved. basic proof of concept for MOAB-29-01-2007 require 'digest/sha1' require 'rubygems' require 'net/dns/mdns-sd' bugselected = ARGV0 || "0".toi TMPARR = DNSSD =...
Apple iChat Bonjour 3.1.6.441 Multiple Denial of Service Exploit
Exploit for macOS platform in category dos / poc ================================================================ Apple iChat Bonjour 3.1.6.441 Multiple Denial of Service Exploit ================================================================ !/usr/bin/ruby c 2006 Lance M. Havok All Rights...
Apple iChat Bonjour 3.1.6.441 - Multiple Denial of Service Vulnerabilities
!/usr/bin/ruby c 2006 Lance M. Havok All Rights Reserved. basic proof of concept for MOAB-29-01-2007 require 'digest/sha1' require 'rubygems' require 'net/dns/mdns-sd' bugselected = ARGV0 || "0".toi TMPARR = DNSSD = Net::DNS::MDNSSD trap"INT" puts "++ Exiting..." begin TMPARR.each do |o| o.stop e...
CVE-2007-0021
Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service null pointer dereference and application crash and possibly execute arbitrary code via format string specifiers in an aim:// URI...
Format string
Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service null pointer dereference and application crash and possibly execute arbitrary code via format string specifiers in an aim:// URI...
CVE-2007-0021
Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service null pointer dereference and application crash and possibly execute arbitrary code via format string specifiers in an aim:// URI...