VULNERABILITY INTELLIGENCE

CVE-2007-0051

CVSS score6.8 MEDIUM
EPSS probability9.34%
CISA KEVNot currently listed
Published2007-01-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references