Mac OS X mDNSResponder UPnP Location Overflow

This module exploits a buffer overflow that occurs when processing specially crafted requests set to mDNSResponder. All Mac OS X systems between version 10.4 and 10.4.9 without the 2007-005 patch are affected. Module Options msf use exploit/osx/mdns/upnp/location msf undefinedlocation show action...

Apple Mac OS X iChat UPnP buffer overflow

Overview A vulnerabilty in the way Apple Mac OS X iChat handles specially crafted UPnP packets may allow execution of arbitrary code or denial of service. Description Apple iChat contains a vulnerability that could be exploited by an attacker on the local network when it attempts to handle...

Apple Mac OS X mDNSResponder buffer overflow vulnerability

Overview Apple Mac OS X mDNSresponder contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description mDNS uses IP multicast with DNS to provide the functionality of a DNS server for service discovery in networks that do not have a DNS server...

Apple Mac OS X 2007-005多个安全漏洞

Apple Mac OS X是一款基于BSD的商业性质的操作系统。 Apple Mac OS X存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务，执行任意代码，提升特权等攻击。 CVE-ID: CVE-2007-0740 Alias Manager在部分条件可以使用户打开恶意文件，导致特权提升。 CVE-ID: CVE-2007-0493, CVE-2007-0494, CVE-2006-4095, CVE-2006-4096： BIND服务程序存在多个安全问题，可导致拒绝服务攻击。 CVE-ID: CVE-2007-0750...

Buffer overflow

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

Buffer overflow

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2386

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2390

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2386

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2386

CVE-2007-2386 describes a buffer overflow in Apple’s mDNSResponder for macOS X (affected 10.4 up to 10.4.9) triggered by crafted UPnP IGD packets, enabling remote code execution or denial of service. Public documentation confirms the issue arises from mDNSResponder processing UPnP IGD data and no...

CVE-2007-2390

The CVE-2007-2390 issue is a buffer overflow in Apple Mac OS X iChat’s UPnP IGD handling. Specifically, processing crafted UPnP Internet Gateway Device packets could allow a remote attacker to cause a denial of service or execute arbitrary code. Affected versions are Mac OS X 10.3.9 and 10.4.9. R...

CVE-2007-2386: Undefined Security Weakness

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2390: Undefined Security Weakness

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

Microsoft Windows UPnP远程堆栈缓冲区溢出漏洞

Microsoft Windows是一款商业性质的操作系统。 Microsoft包含的UPnP组件存在缓冲区溢出问题，远程攻击者可以利用漏洞以此服务进程权限执行任意指令。 问题存在于HTTP头数据发送给UPnP控制点作为请求或通知的一部分的处理上。由于处理部分字段没有进行任意检查是否有足够的存储空间，发送畸形请求可导致基于堆栈的缓冲区溢出，精心构建提交数据可以以服务进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windo...

Stack overflow

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-1204

Stack-based buffer overflow in the Universal Plug and Play UPnP service in Microsoft Windows XP SP2 allows remote attackers on the same subnet to execute arbitrary code via crafted HTTP headers in request or notification messages, which trigger memory corruption...

CVE-2007-1204

The CVE-2007-1204 issue affects Microsoft Windows XP SP2 with the UPnP service. It is a stack-based buffer overflow triggered by specially crafted HTTP headers in UPnP requests/notifications, allowing a remote attacker on the same subnet to execute arbitrary code in the context of the vulnerable ...

Microsoft Windows UPnP Remote Stack Buffer Overflow Vulnerability

Description Microsoft Windows is prone to a remote stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. This occurs when handling certain HTTP requests. To exploit this issue, an attack...