Buffer overflow

Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

CVE-2007-3744

Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

CVE-2007-3748

Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

Heap overflow

Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

Immunity Canvas: MU

Name| mu ---|--- CVE| CVE-2007-3744 Exploit Pack| CANVAS Description| MacOS X 10.4 mDNSResponder UPNP Remote Root Exploit Notes| CVE Name: CVE-2007-3744 Notes: If the target port is not specified, it will be located automatically. This exploit will attempt to bypass the built-in OS X firewall by...

CVE-2007-3748

CVE-2007-3748 describes a buffer overflow in the UPnP IGD code used by iChat on macOS X 10.3.9 and 10.4.10. The issue allows network-adjacent remote attackers to execute arbitrary code by sending a crafted packet, per the connected documents. Affected component: UPnP IGD implementation in iChat. ...

CVE-2007-3744

Heap-based buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in mDNSResponder on Apple Mac OS X 10.4.10 before 20070731 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

CVE-2007-3744

CVE-2007-3744 affects Apple macOS X 10.4.10 (up to build 20070731) via a heap-based overflow in mDNSResponder’s UPnP IGD functionality. The issue arises in the Legacy NAT Traversal code when processing malformed HTTP requests, allowing a network-adjacent remote attacker to execute code with root ...

CVE-2007-3748

Buffer overflow in the UPnP IGD Internet Gateway Device Standardized Device Control Protocol implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet...

Apple Mac OS X mDNSResponder buffer overflow vulnerability

Overview Apple Mac OS X mDNSresponder contains a buffer overflow vulnerability that may allow an attacker to execute arbitrary code. Description mDNS uses IP multicast with DNS to provide the functionality of a DNS server for service discovery in networks that do not have a DNS server...

Apple Mac OS X iChat UPnP buffer overflow

Overview A vulnerabilty in the way Apple Mac OS X iChat handles specially crafted UPnP packets may allow execution of arbitrary code or denial of service. Description Apple iChat contains a vulnerability that could be exploited by an attacker on the local network when it attempts to handle...

Apple Mac OS X 2007-005多个安全漏洞

Apple Mac OS X是一款基于BSD的商业性质的操作系统。 Apple Mac OS X存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务，执行任意代码，提升特权等攻击。 CVE-ID: CVE-2007-0740 Alias Manager在部分条件可以使用户打开恶意文件，导致特权提升。 CVE-ID: CVE-2007-0493, CVE-2007-0494, CVE-2006-4095, CVE-2006-4096： BIND服务程序存在多个安全问题，可导致拒绝服务攻击。 CVE-ID: CVE-2007-0750...

Buffer overflow

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2386

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2390

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

Buffer overflow

Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service application termination and possibly execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

CVE-2007-2386

CVE-2007-2386 describes a buffer overflow in Apple’s mDNSResponder for macOS X (affected 10.4 up to 10.4.9) triggered by crafted UPnP IGD packets, enabling remote code execution or denial of service. Public documentation confirms the issue arises from mDNSResponder processing UPnP IGD data and no...

CVE-2007-2390

The CVE-2007-2390 issue is a buffer overflow in Apple Mac OS X iChat’s UPnP IGD handling. Specifically, processing crafted UPnP Internet Gateway Device packets could allow a remote attacker to cause a denial of service or execute arbitrary code. Affected versions are Mac OS X 10.3.9 and 10.4.9. R...

CVE-2007-2386

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service application termination or execute arbitrary code via a crafted UPnP Internet Gateway Device IGD packet...

Microsoft Windows UPnP远程堆栈缓冲区溢出漏洞

Microsoft Windows是一款商业性质的操作系统。 Microsoft包含的UPnP组件存在缓冲区溢出问题，远程攻击者可以利用漏洞以此服务进程权限执行任意指令。 问题存在于HTTP头数据发送给UPnP控制点作为请求或通知的一部分的处理上。由于处理部分字段没有进行任意检查是否有足够的存储空间，发送畸形请求可导致基于堆栈的缓冲区溢出，精心构建提交数据可以以服务进程权限执行任意指令。 Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windo...