The handle_regservice_request function in mDNSResponder before 625.41.2 allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iphone_os | Apple | 9.0 (including) | 9.1 (excluding) |
| Mac_os_x | Apple | 10.9 (including) | 10.9.5 (excluding) |
| Mac_os_x | Apple | 10.10.0 (including) | 10.10.5 (excluding) |
| Mac_os_x | Apple | 10.11.0 (including) | 10.11.1 (excluding) |
| Watchos | Apple | * | 2.1 (excluding) |
References
- http://www.kb.cert.org/vuls/id/143335
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://www.securitytracker.com/id/1036181
- https://support.apple.com/HT206846
- http://www.kb.cert.org/vuls/id/143335
- http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html
- http://www.securitytracker.com/id/1036181
- https://support.apple.com/HT206846