CVE Feed

    Dashboard / CVE / CVE-2007-0613

    CVE-2007-0613

    The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.

    Published:Jan 31, 2007
    Last Modified:Apr 23, 2026
    EPS:Jan 31, 2007
    EPSS Score:0.05668
    CVSS Score:5

    Affected Products

    Vendor
    Apple
    Product
    Ichat
    Vendor
    Apple
    Product
    Instant Message Framework
    Vendor
    Apple
    Product
    Mdnsresponder

    Exploits

    http://projects.info-pull.com/moab/MOAB-29-01-2007.htmlhttp://www.securityfocus.com/bid/22304http://projects.info-pull.com/moab/MOAB-29-01-2007.htmlhttp://www.securityfocus.com/bid/22304https://www.exploit-db.com/exploits/3230

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2007-3746 (CVSS 6.8) — The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not properly check the bounds of hea…
    CVE-2007-3747 (CVSS 6.8) — The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation an…
    CVE-2007-3748 (CVSS 5.4) — Buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation …
    CVE-2007-0710 (CVSS 2.1) — The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of servi…
    CVE-2007-0614 (CVSS 7.8) — The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10…
    CVE-2007-0021 (CVSS 7.5) — Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null po…
    CVE-2004-0873 (CVSS 7.5) — Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High