CVE-2007-0021

Currently unrated

Key Information:

Vendor
Apple
Status
Ichat
Vendor
CVE Published:
23 January 2007

Summary

Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and application crash) and possibly execute arbitrary code via format string specifiers in an aim:// URI.

References

http://lists.apple.com/archives/Security-announce/2007/Fe...
vendor-advisoryx_refsource_APPLE
http://projects.info-pull.com/moab/MOAB-20-01-2007.html
x_refsource_MISC
http://www.us-cert.gov/cas/techalerts/TA07-047A.html
third-party-advisoryx_refsource_CERT

EPSS Score

61% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.