CVE-2007-0613: Medium severity Apple Instant Message Framework vulnerability

Published Jan 31, 2007

Updated

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate presence.tcp mDNS queries.

Affected Software

3 affected components

Apple Instant Message Framework=428

Apple iChat=3.1.6

Apple mDNSResponder

Event History

Jan 31, 2007

CVE Published

11:28 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0613?

CVE-2007-0613 is classified as a denial of service vulnerability which can disrupt communication.

How do I fix CVE-2007-0613?

To fix CVE-2007-0613, updating the affected software to a later version that addresses the vulnerability is recommended.

What software is affected by CVE-2007-0613?

CVE-2007-0613 affects Apple mDNSResponder, iChat version 3.1.6, and the InstantMessage framework version 428.

What type of attack is associated with CVE-2007-0613?

CVE-2007-0613 is associated with remote denial of service attacks through flooding of duplicate contact entries.

When was CVE-2007-0613 disclosed?

CVE-2007-0613 was publicly disclosed in January 2007.