Format String Vulnerability in Apple iChat by Apple
CVE-2007-0021

Currently unrated

Key Information:

Vendor

Apple
Status
Ichat
Vendor
CVE Published:
23 January 2007

What is CVE-2007-0021?

A format string vulnerability exists in Apple iChat 3.1.6, which can be exploited by remote attackers through manipulated aim:// URIs. By using specific format string specifiers, an attacker can induce a null pointer dereference, leading to application crashes and the potential execution of arbitrary code, compromising the security of the system.

References

http://lists.apple.com/archives/Security-announce/2007/Fe...
vendor-advisoryx_refsource_APPLE
http://projects.info-pull.com/moab/MOAB-20-01-2007.html
x_refsource_MISC
http://www.us-cert.gov/cas/techalerts/TA07-047A.html
third-party-advisoryx_refsource_CERT

EPSS Score

40% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.