Lucene search

PRIOn knowledge basePRION:CVE-2007-0344

HistoryJan 18, 2007 - 2:28 a.m.

Format string

2007-01-1802:28:00

PRIOn knowledge base

www.prio-n.com

8.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.908 High

EPSS

Percentile

98.8%

JSON

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.

CPENameOperatorVersion
colloquyle2.1

CPE	Name	Operator	Version
	colloquy	le	2.1

References

projects.info-pull.com/moab/MOAB-16-01-2007.html

secunia.com/advisories/23801

www.osvdb.org/32688

www.securityfocus.com/bid/22086

www.vupen.com/english/advisories/2007/0238

www.exploit-db.com/exploits/3139

8.2 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.908 High

EPSS

Percentile

98.8%

JSON

Related for PRION:CVE-2007-0344