CVE-2015-7987
CriticalSummary
Multiple buffer overflows in mDNSResponder before version 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations. The issues involve the GetValueForIPv4Addr, GetValueForMACAddr, rfc3110_import, and CopyNSEC3ResourceRecord functions.
Risk Assessment
Attackers may exploit these vulnerabilities to gain access to sensitive data or inject malicious code, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update mDNSResponder to version 625.41.2 or later to mitigate these vulnerabilities and to monitor systems for unauthorized access.
Other vulnerabilities in mDNSResponder
See all- CVE-2022-23748HighActively exploited
mDNSResponder.exe is vulnerable to a DLL Sideloading attack. The executable improperly specifies how to load the DLL, from which folder and under what conditions. An attacker could use the legitimate executable to load malicious files.
- CVE-2015-7988Critical
The handle_regservice_request function in mDNSResponder before version 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Original NVD description (English source)
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS