CVE-2007-2386

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 50%

from disclosure to weapon1325 days

Published on NVDMay 24

1st PoC+1325d

metasploit+1d

exploitation probability

50%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/16871unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://docs.info.apple.com/article.html?artnum=305530 http://lists.apple.com/archives/security-announce/2007/Jun/msg00001.html http://lists.apple.com/archives/security-announce/2007/May/msg00004.html http://secunia.com/advisories/25402 http://secunia.com/advisories/25745 https://exchange.xforce.ibmcloud.com/vulnerabilities/34493 http://www.kb.cert.org/vuls/id/221876 http://www.osvdb.org/35142 http://www.securityfocus.com/bid/24144 http://www.securityfocus.com/bid/24159 http://www.securitytracker.com/id?1018123 http://www.vupen.com/english/advisories/2007/1939