CVE-2007-0644 in Safari

Summary

Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in filenames that are not properly handled when calling the (1) NSLog and (2) NSBeginAlertSheet Apple AppKit functions.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 01/31/2007
• Disclosure: 01/31/2007
• Moderation: VulDB entry created
• Entries: VDB-34767 (1)
• CPE: ready
• CWE: CWE-404 (Confirmed)
• Exploit: Download
• CVSS: 7.5
• EPSS: 0.05223
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-0644
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-0644
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-0644/