Vulnerability Note VU#116100

Apple Mac OS X iChat UPnP buffer overflow

Original Release date: 25 May 2007 | Last revised: 29 May 2007

Overview

A vulnerabilty in the way Apple Mac OS X iChat handles specially crafted UPnP packets may allow execution of arbitrary code or denial of service.

Description

Apple iChat contains a vulnerability that could be exploited by an attacker on the local network when it attempts to handle specially crafted Universal Plug and Play (UPnP) protocol packets. According to Apple Security Update 2007-005:

    A buffer overflow vulnerability exists in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) code used to create Port Mappings on home NAT gateways in iChat.

Impact

An unauthenticated attacker on the local network may be able to execute arbitrary code or cause a denial of service.

Solution

Upgrade

Apple has addressed this issue in Apple Security Update 2007-005.

Systems Affected (Learn More)

VendorStatusDate NotifiedDate Updated
Apple Computer, Inc.Affected-25 May 2007
If you are a vendor and your product is affected, let us know.

CVSS Metrics (Learn More)

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A N/A

References

Credit

This issue was reported in Apple Security Update 2007-005.

This document was written by Chris Taschner.

Other Information

  • CVE IDs: CVE-2007-2390
  • Date Public: 24 May 2007
  • Date First Published: 25 May 2007
  • Date Last Updated: 29 May 2007
  • Severity Metric: 9.98
  • Document Revision: 12

Feedback

If you have feedback, comments, or additional information about this vulnerability, please send us email.