CVE-2007-0645

Description

Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions.

Affected products

• Apple / iphoto6.0.5 – 6.0.5

Exploits & proofs of concept

• exploit-dbApple Mac OSX 10.4.x - iPhoto 'photo://' URL Handling Format Stringby LMH

References

• MISChttp://projects.info-pull.com/moab/MOAB-30-01-2007.html
• MISChttp://www.securityfocus.com/bid/22326
• MISChttp://www.osvdb.org/32711
• MISChttp://www.digitalmunition.com/MOAB-30-01-2007.html