CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
Low
EPSS
Percentile
87.9%
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.
Vendor | Product | Version | CPE |
---|---|---|---|
apple | ichat | 3.1.6 | cpe:2.3:a:apple:ichat:3.1.6:*:*:*:*:*:*:* |
apple | instant_message_framework | 428 | cpe:2.3:a:apple:instant_message_framework:428:*:*:*:*:*:*:* |
apple | mdnsresponder | * | cpe:2.3:a:apple:mdnsresponder:*:*:*:*:*:*:*:* |