Apple iPhoto Photocast Subscription Remote Format String Vulnerability

Bugtraq ID:	27636
Class:	Input Validation Error
CVE:	CVE-2008-0043
Remote:	Yes
Local:	No
Published:	Feb 05 2008 12:00AM
Updated:	Feb 08 2008 03:36AM
Credit:	Nathan McFeters of Ernst & Young's Advanced Security Center is credited with the discovery of this vulnerability.
Vulnerable:	Apple iPhoto 7.1.2 Apple iPhoto 6.0.6 Apple iPhoto 6.0.5 (316) Apple iPhoto 7.1
Not Vulnerable:

Apple iPhoto Photocast Subscription Remote Format String Vulnerability

iPhoto is prone to a format-string vulnerability.

Exploiting this issue will allow attackers to execute arbitrary code with the permissions of a user running the application. Failed attacks will likely cause denial-of-service conditions.

This issue affects versions prior to iPhoto 7.1.2.

Apple iPhoto Photocast Subscription Remote Format String Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iPhoto Photocast Subscription Remote Format String Vulnerability

Solution:
The vendor has released iPhoto 7.1.2 to address this issue.


Apple iPhoto 7.1

• Apple iPhoto 7.1.2
  http://wsidecar.apple.com/cgi-bin/nph-reg3rdpty2.pl/product=17207&cat= 1&platform=osx&method=sa/iPhoto_712.dmg

Apple iPhoto Photocast Subscription Remote Format String Vulnerability

References:

• About the security content of iPhoto 7.1.2 (Apple)
  
• iPhoto Homepage (Apple)