CVE-2008-2326

Executive Summary

Informations
Name	CVE-2008-2326	First vendor Publication	2008-09-10
Vendor	Cve	Last vendor Modification	2011-03-07

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

mDNSResponder in the Bonjour Namespace Provider in Apple Bonjour for Windows before 1.0.5 allows attackers to cause a denial of service (NULL pointer dereference and application crash) by resolving a crafted .local domain name that contains a long label.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2326

CWE : Common Weakness Enumeration

id	Name
CWE-20	Improper Input Validation

CPE : Common Platform Enumeration

Type	Description	Count
Application	Apple Bonjour cpe:/a:apple:bonjour:1.0.4:unknown:windows	1

Open Source Vulnerability Database (OSVDB)

id	Description
48019	Apple Bonjour for Windows Bonjour Namespace Provider mDNSResponder Domain Nam...

Internal Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce//2008/Sep/msg00002.html
BID	http://www.securityfocus.com/bid/31091
CONFIRM	http://support.apple.com/kb/HT2990
SECTRACK	http://www.securitytracker.com/id?1020845
SECUNIA	http://secunia.com/advisories/31822
VUPEN	http://www.vupen.com/english/advisories/2008/2524
XF	http://xforce.iss.net/xforce/xfdb/45005