CVE-2007-0613: Apple Ichat

Medium severity, CVSS 5.0. EPSS: 7.4% chance of exploitation in the next 30 days.

The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.

Affected products

• Apple Ichat: version 3.1.6 only
• Apple Instant Message Framework: version 428 only
• Apple Mdnsresponder: any version

Published 2007-01-31. Last modified 2026-06-16.