CVE-2007-0645 Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when ca...
MediumCVSS 6.8
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple iphoto | = 6.0.5 | No fix listed |
References
- projects.info-pull.com
- www.digitalmunition.com vendor-advisory
- 32711 vdb-entry
- 22326 vdb-entry