CVE-2007-0344

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://projects.info-pull.com/moab/MOAB-16-01-2007.html	Exploit
http://secunia.com/advisories/23801	Patch Vendor Advisory
http://www.osvdb.org/32688
http://www.securityfocus.com/bid/22086	Exploit Patch
http://www.vupen.com/english/advisories/2007/0238	Vendor Advisory
https://www.exploit-db.com/exploits/3139

Configurations

Configuration 1 (hide)

cpe:2.3:a:colloquy:colloquy:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2007-01-18 02:28

Updated : 2024-02-28 11:01

NVD link : CVE-2007-0344

Mitre link : CVE-2007-0344

CVE.ORG link : CVE-2007-0344

JSON object : View

Products Affected

colloquy

colloquy

CWE

CWE-134

Use of Externally-Controlled Format String

{"id": "CVE-2007-0344", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-01-18T02:28:00.000", "references": [{"url": "http://projects.info-pull.com/moab/MOAB-16-01-2007.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/23801", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/32688", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/22086", "tags": ["Exploit", "Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0238", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/3139", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-134"}]}], "descriptions": [{"lang": "en", "value": "Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de cadena de formato en (1) _invitedToRoom: y (2) _invitedToDirectChat: en Colloquy versi\u00f3n 2.1 y anteriores, permiten a atacantes remotos causar una denegaci\u00f3n de servicio (bloqueo de aplicaci\u00f3n) y posiblemente ejecutar c\u00f3digo arbitrario por medio de especificadores de cadena de formato en el nombre de canal de una petici\u00f3n INVITE, relacionada con la implementaci\u00f3n de AlertSheet y AlertPanel en Apple AppKit."}], "lastModified": "2017-10-19T01:29:58.787", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:colloquy:colloquy:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4E9842A-1C3A-4D97-A6D9-9AF6912ACF63", "versionEndIncluding": "2.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}