CVE Database
/

CVE-2007-0344

Back to search

CVE-2007-0344

Published: Jan 18, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.

VendorProductVersions

n/a

n/a

affected
n/a

References

22086
vdb-entry
x_refsource_BID
3139
exploit
x_refsource_EXPLOIT-DB
ADV-2007-0238
vdb-entry
x_refsource_VUPEN
32688
vdb-entry
x_refsource_OSVDB
23801
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now