CVE-2007-0344 Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and poss...
HighCVSS 7.5
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| colloquy | <= 2.1 | No fix listed |
References
- projects.info-pull.com exploit
- 23801 patch third-party-advisory vendor-advisory
- 32688 vdb-entry
- 22086 exploit patch vdb-entry
- ADV-2007-0238 vdb-entry vendor-advisory
- 3139 exploit