Priority LOW 29
Buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary co…
CVSS 2.0MEDIUM 5.4· Adjacent network · No auth · Interaction — · EPSS 0.0215 · Published 2007-08-03 · No fix listed
Priority LOW 36
The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute arbitrary code via a crafted…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03356 · Published 2007-08-03 · No fix listed
Priority LOW 36
The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not properly check the bounds of heap read and write operations, which allows remote attackers to execute arbitrary code via a crafted applet.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03356 · Published 2007-08-03 · No fix listed
Priority LOW 17
The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persistent application crash) via unspecified vectors, possibly related to CVE-2007-0614.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.03368 · Published 2007-02-16 · No fix listed CWE-399
Priority MEDIUM 45
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (persistent application crash) via a crafted phsh ha…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.08663 · Published 2007-01-31 · No fix listed
Priority LOW 33
The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0742 · Published 2007-01-31 · No fix listed
Priority MEDIUM 53
Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and application crash) and possibly execute arbitrary code via format string specifiers in a…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.23688 · Published 2007-01-23 · No fix listed
Priority LOW 35
Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01292 · Published 2004-09-24 · No fix listed