PT-2007-2103 · Apple · Appkit+1

Publicado 2007-02-01 · Atualizado 2008-09-05 · CVE-2007-0647

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Help Viewer version 3.0.0

Description The issue allows remote user-assisted attackers to cause a denial of service, resulting in a crash. This occurs when format string specifiers are included in a filename and not properly handled when calling the NSBeginAlertSheet function from the Apple AppKit.

Recommendations For Help Viewer version 3.0.0, consider restricting the handling of filenames with format string specifiers to prevent the denial of service. As a temporary workaround, avoid using filenames that include format string specifiers until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2007-0647

Produtos afetados

Appkit

Help Viewer

Referências · 5

• 🔥 http://digitalmunition.com/MOAB-30-01-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/29553 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0647 · Nota de Segurança
• http://osvdb.org/32707 · Nota
• http://securityfocus.com/bid/22326 · Nota