Ichat

ichat

Vendor: Apple • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2007-3748 1Apple 1Ichat Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 5.4 MEDIUM· v2 Buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary co...Show more Buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to execute arbitrary code via a crafted packet.Show less
CVE-2007-3747 1Apple 1Ichat Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute arbitrary code via a crafted...Show more The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute arbitrary code via a crafted applet.Show less
CVE-2007-3746 1Apple 1Ichat Apr 23, 2026 Aug 3, 2007 N/A· v4 N/A· v3 6.8 MEDIUM· v2 The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not properly check the bounds of heap read and write operations, which allows remote attackers to execute arbitrary code via a crafted applet.
CVE-2007-0710 1Apple 1Ichat Apr 23, 2026 Feb 16, 2007 N/A· v4 N/A· v3 2.1 LOW· v2 The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persistent application crash) via unspecified vectors, possibly related to CVE-2007-0614.
CVE-2007-0614 1Apple 3Ichat Instant Message FrameworkMac Os X Apr 23, 2026 Jan 31, 2007 N/A· v4 N/A· v3 7.8 HIGH· v2 The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (persistent application crash) via a crafted phsh ha...Show more The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (persistent application crash) via a crafted phsh hash attribute in a TXT key.Show less
CVE-2007-0613 1Apple 3Ichat Instant Message FrameworkMdnsresponder Apr 23, 2026 Jan 31, 2007 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote...Show more The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available contacts, which allows remote attackers to cause a denial of service (disrupted communication) via a flood of duplicate _presence._tcp mDNS queries.Show less
CVE-2007-0021 1Apple 1Ichat Apr 23, 2026 Jan 23, 2007 N/A· v4 N/A· v3 7.5 HIGH· v2 Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and application crash) and possibly execute arbitrary code via format string specifiers in a...Show more Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and application crash) and possibly execute arbitrary code via format string specifiers in an aim:// URI.Show less
CVE-2004-0873 1Apple 2Ichat Ichat Av Apr 16, 2026 Dec 23, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.