5

CVE-2008-2326

mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Bonjour Version 1.0.4 Update unknown Edition windows
   Microsoft ≫ Windows-nt Version xp Update sp3
   Microsoft ≫ Windows 2000 Version -
   Microsoft ≫ Windows 2003 Server Version -
   Microsoft ≫ Windows Vista Version -
   Microsoft ≫ Windows Xp Version - Update sp2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 7.49% 0.939
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html
http://secunia.com/advisories/31822
http://support.apple.com/kb/HT2990
http://www.securityfocus.com/bid/31091
Patch
http://www.securitytracker.com/id?1020845
http://www.vupen.com/english/advisories/2008/2524
https://exchange.xforce.ibmcloud.com/vulnerabilities/45005