CVE-2007-0647: High severity Apple iOS and macOS vulnerability

Published Feb 1, 2007

Updated

Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling the NSBeginAlertSheet Apple AppKit function.

Affected Software

1 affected component

Apple iOS and macOS=10.3.9

Event History

Feb 1, 2007

CVE Published

12:28 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0647?

CVE-2007-0647 is classified as a medium severity vulnerability due to its potential to cause denial of service.

How do I fix CVE-2007-0647?

To fix CVE-2007-0647, updating to a version of macOS that does not have the vulnerability is recommended.

Who is affected by CVE-2007-0647?

CVE-2007-0647 affects users running Help Viewer 3.0.0 on macOS version 10.3.9.

What type of attack does CVE-2007-0647 involve?

CVE-2007-0647 involves a remote user-assisted attack that can lead to application crashes.

Is there a workaround for CVE-2007-0647?

Currently, there are no specific workarounds for CVE-2007-0647 other than upgrading to an unaffected version of macOS.