Attack (Attack ID:319491)

Release Date2010/03/09

Attack NameEXPLOIT Apple Mac OS X iChat AIM URL Format String vulnerability -1 (CVE-2007-0021)

Severity

BUG ID

CVE ID

 

Description

Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and application crash) and possibly execute arbitrary code via format string specifiers in an aim:// URI.
Impact:Remote code execution
Affected System:Others
Additional References:BID:22146;CVE-2007-0021

 

Solution

Update vendor's patch.