01 February 2007

Apple Mac OS X iChat Bonjour Denial of Service

"LMH has reported a vulnerability in Apple iChat, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in iChat agent using Bonjour within the processing of TXT key hashes. This can be exploited to cause the application to crash by broadcasting a specially crafted TXT key hash.

The vulnerability is reported in iChat 3.1.6 (v441), InstantMessage framework v428 on Mac OS X 10.4.8 (x86). Other versions may also be affected."

Click on the link below for the full article:

http://www.secuobs.com/secumail/snsecumail/msg04492.shtml

No comments: