5
CVE-2008-2326
- EPSS 7.03%
- Veröffentlicht 11.09.2008 01:10:25
- Zuletzt bearbeitet 09.04.2025 00:30:58
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Bonjour Version1.0.4 Updateunknown Editionwindows
Microsoft ≫ Windows-nt Versionxp Updatesp3
Microsoft ≫ Windows 2000 Version-
Microsoft ≫ Windows 2003 Server Version-
Microsoft ≫ Windows Vista Version-
Microsoft ≫ Windows Xp Version- Updatesp2
Microsoft ≫ Windows 2000 Version-
Microsoft ≫ Windows 2003 Server Version-
Microsoft ≫ Windows Vista Version-
Microsoft ≫ Windows Xp Version- Updatesp2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.03% | 0.912 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.