CVE-2007-0614: High severity Apple iChat vulnerability

Published Jan 31, 2007

Updated

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (persistent application crash) via a crafted phsh hash attribute in a TXT key.

Affected Software

3 affected components

Apple iChat=3.1.6

Apple Instant Message Framework=428

Apple iOS and macOS=10.4.8

Event History

Jan 31, 2007

CVE Published

11:28 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0614?

CVE-2007-0614 is classified as a denial of service vulnerability that can cause persistent application crashes.

How do I fix CVE-2007-0614?

To mitigate the effects of CVE-2007-0614, it is recommended to update to the latest version of macOS and affected applications if available.

Which software is affected by CVE-2007-0614?

CVE-2007-0614 affects Apple iChat version 3.1.6, the Instant Message framework version 428, and macOS X version 10.4.8.

What can attackers achieve with CVE-2007-0614?

Attackers can exploit CVE-2007-0614 to crash applications utilizing the Bonjour functionality, resulting in a denial of service.

Is there a workaround for CVE-2007-0614?

Currently, the best approach for CVE-2007-0614 is to avoid using the affected software or restrict access to untrusted networks.