3 matches found
CVE-2011-0220
Apple Bonjour before 2011 is affected by CVE-2011-0220, with a crash caused by processing a crafted multicast DNS packet. The CVE relates to Apple’s mDNSResponder stack; details on affected versions, exact root cause, exploitation status, and available fixes are not provided in the connected docu...
CVE-2008-3630
CVE-2008-3630 affects Apple Bonjour (mDNSResponder) for Windows prior to 1.0.5. The issue arises when an application uses the Bonjour API for unicast DNS: DNS transaction IDs and source ports are not randomized, making it easier for a remote attacker to spoof DNS responses. This is described as a...
CVE-2008-2326
CVE-2008-2326 affects Apple Bonjour for Windows (mDNSResponder) prior to 1.0.5. The vulnerability is a NULL pointer dereference when resolving a crafted .local domain name with a long label, leading to denial of service (application crash). Public docs from multiple sources confirm the issue and ...