CVE-2007-0344 | BDVDB-2026-21675 Detail

Description#

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/22086
https://www.exploit-db.com/exploits/3139
http://projects.info-pull.com/moab/MOAB-16-01-2007.html
http://www.vupen.com/english/advisories/2007/0238
http://www.osvdb.org/32688
http://secunia.com/advisories/23801

Exploit#

https://www.exploit-db.com/exploits/3139

History#

Version 12007-01-18Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.