Apple Instant Message Framework vulnerabilities

2 CVEs affecting Apple Instant Message Framework, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-0614, published 2007-01-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0614, published 2007-01-31. High severity, CVSS 7.8. EPSS: 8.6% chance of exploitation in the next 30 days. The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (persistent application crash)…
CVE-2007-0613, published 2007-01-31. Medium severity, CVSS 5.0. EPSS: 7.4% chance of exploitation in the next 30 days. The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available…