CVE-2015-7987
CriticalSummary
Multiple buffer overflows in mDNSResponder before version 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations. The issues involve the GetValueForIPv4Addr, GetValueForMACAddr, rfc3110_import, and CopyNSEC3ResourceRecord functions.
Risk Assessment
Attackers may exploit these vulnerabilities to gain access to sensitive data or inject malicious code, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update mDNSResponder to version 625.41.2 or later to mitigate these vulnerabilities and to monitor systems for unauthorized access.
Original NVD description (English source)
Multiple buffer overflows in mDNSResponder before 625.41.2 allow remote attackers to read or write to out-of-bounds memory locations via vectors involving the (1) GetValueForIPv4Addr, (2) GetValueForMACAddr, (3) rfc3110_import, or (4) CopyNSEC3ResourceRecord function.