CVE-2015-7988
CriticalSummary
The handle_regservice_request function in mDNSResponder before version 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Risk Assessment
Attackers can exploit this vulnerability to execute code remotely, potentially leading to severe security and service availability issues.
Recommendation
It is recommended to update mDNSResponder to version 625.41.2 or later to mitigate this vulnerability.
Other vulnerabilities in mDNSResponder
See all- CVE-2022-23748HighActively exploited
mDNSResponder.exe is vulnerable to a DLL Sideloading attack. The executable improperly specifies how to load the DLL, from which folder and under what conditions. An attacker could use the legitimate executable to load malicious files.
- CVE-2015-7987Critical
Multiple buffer overflows in mDNSResponder before version 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations. The issues involve the GetValueForIPv4Addr, GetValueForMACAddr, rfc3110_import, and CopyNSEC3ResourceRecord functions.
Original NVD description (English source)
The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS