VulnerabilityModified

CVE-2007-2386

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.

HIGH 9.4EPSS 50.0%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 50.0%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

CVSS 2.0: 9.4 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:C
EPSS: 50.00% probability · 99th percentile
CISA KEV: Not listed
Affected: apple/mac os x
Source: cve@mitre.org

References

http://docs.info.apple.com/article.html?artnum=305530
http://lists.apple.com/archives/security-announce/2007/Jun/msg00001.html
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
http://secunia.com/advisories/25402
http://secunia.com/advisories/25745
http://www.kb.cert.org/vuls/id/221876US Government Resource
http://www.osvdb.org/35142
http://www.securityfocus.com/bid/24144
http://www.securityfocus.com/bid/24159
http://www.securitytracker.com/id?1018123
http://www.vupen.com/english/advisories/2007/1939
http://www.vupen.com/english/advisories/2007/2269
https://exchange.xforce.ibmcloud.com/vulnerabilities/34493
http://docs.info.apple.com/article.html?artnum=305530
http://lists.apple.com/archives/security-announce/2007/Jun/msg00001.html
http://lists.apple.com/archives/security-announce/2007/May/msg00004.html
http://secunia.com/advisories/25402
http://secunia.com/advisories/25745
http://www.kb.cert.org/vuls/id/221876US Government Resource
http://www.osvdb.org/35142
http://www.securityfocus.com/bid/24144
http://www.securityfocus.com/bid/24159
http://www.securitytracker.com/id?1018123
http://www.vupen.com/english/advisories/2007/1939
http://www.vupen.com/english/advisories/2007/2269
https://exchange.xforce.ibmcloud.com/vulnerabilities/34493

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.