CVE-2007-0051

Exploit

EPSS 35.45%
Veröffentlicht 04.01.2007 18:28:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 15

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Iphoto Version6.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	35.45%	0.969

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-134 Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0100.html

http://docs.info.apple.com/article.html?artnum=305215

http://lists.apple.com/archives/security-announce/2007/Mar//msg00003.html

http://osvdb.org/31165

http://projects.info-pull.com/moab/MOAB-04-01-2007.html

Vendor Advisory

Exploit

http://secunia.com/advisories/23615

Vendor Advisory

http://www.digitalmunition.com/DMA%5B2007-0104a%5D.txt

http://www.securityfocus.com/archive/1/455968/100/0/threaded

http://www.securityfocus.com/bid/21871

http://www.vupen.com/english/advisories/2007/0057

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/31281

https://www.exploit-db.com/exploits/3080

https://nvd.nist.gov/vuln/detail/CVE-2007-0051

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0051

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0051

EUVD