{"vuid":"VU#116100","idnumber":"116100","name":"Apple Mac OS X iChat UPnP buffer overflow","keywords":["Apple","Mac","OS X","iChat","buffer overflow","UPnP IGD","Internet Gateway Device Standardized Device Control Protocol code","apple_2007-005"],"overview":"A vulnerabilty in the way Apple Mac OS X iChat handles specially crafted UPnP packets may allow execution of arbitrary code or denial of service.","clean_desc":"Apple iChat contains a vulnerability that could be exploited by an attacker on the local network when it attempts to handle specially crafted Universal Plug and Play (UPnP) protocol packets. According to Apple Security Update 2007-005: A buffer overflow vulnerability exists in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) code used to create Port Mappings on home NAT gateways in iChat.","impact":"An unauthenticated attacker on the local network may be able to execute arbitrary code or cause a denial of service.","resolution":"Upgrade Apple has addressed this issue in Apple Security Update 2007-005.","workarounds":"","sysaffected":"","thanks":"This issue was reported in Apple Security Update \n2007-005","author":"This document was written by Chris Taschner.","public":["h","t","t","p",":","/","/","d","o","c","s",".","i","n","f","o",".","a","p","p","l","e",".","c","o","m","/","a","r","t","i","c","l","e",".","h","t","m","l","?","a","r","t","n","u","m","=","3","0","5","5","3","0"],"cveids":["CVE-2007-2390"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2007-05-24T21:05:10Z","publicdate":"2007-05-24T00:00:00Z","datefirstpublished":"2007-05-25T18:28:25Z","dateupdated":"2007-05-29T19:39:38Z","revision":12,"vrda_d1_directreport":"0","vrda_d1_population":"3","vrda_d1_impact":"2","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"4","cam_population":"10","cam_impact":"20","cam_easeofexploitation":"14","cam_attackeraccessrequired":"10","cam_scorecurrent":"9.975","cam_scorecurrentwidelyknown":"12.6","cam_scorecurrentwidelyknownexploited":"23.1","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":9.975,"vulnote":null}