5
CVE-2008-2326
- EPSS 7.03%
- Published 11.09.2008 01:10:25
- Last modified 09.04.2025 00:30:58
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.
Data is provided by the National Vulnerability Database (NVD)
Apple ≫ Bonjour Version1.0.4 Updateunknown Editionwindows
Microsoft ≫ Windows-nt Versionxp Updatesp3
Microsoft ≫ Windows 2000 Version-
Microsoft ≫ Windows 2003 Server Version-
Microsoft ≫ Windows Vista Version-
Microsoft ≫ Windows Xp Version- Updatesp2
Microsoft ≫ Windows 2000 Version-
Microsoft ≫ Windows 2003 Server Version-
Microsoft ≫ Windows Vista Version-
Microsoft ≫ Windows Xp Version- Updatesp2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.03% | 0.912 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.