CVE-2007-2386

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to...

9.4 HighPublic exploit

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.

Exploit likelihood

50.0%Down 23.0 points since Feb 4, 2022

What each source reports

NVD Score used 9.4

Record: CVE-2007-2386
CVSS 2.0: 9.4 HighAV:N/AC:L/Au:N/C:C/I:N/A:C
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-2386
Updated: 2026-11-02

EUVDEUVD-2007-2381 No score

Record: EUVD-2007-2381
Updated: 2026-11-03

GitHub AdvisoriesGHSA-xrgw-2g7f-5735 No score

Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to...

Record: GHSA-xrgw-2g7f-5735
Updated: 2026-11-02

Affected products

apple mac os x

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Apple Mac OSX - mDNSResponder UPnP Location Overflow (Metasploit)	2011-01-08
Metasploit	Mac OS X mDNSResponder UPnP Location Overflow	2007-05-25

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories, Metasploit
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-2386 is a high vulnerability (CVSS 9.4) in Apple Mac Os X, published May 24, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 50.0%, the 98th percentile. No source names a fixed version.

References

Show 9 moreShow less