Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions prior to 6.0.6, allows remote user-assisted malicious users to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apple iphoto 6.0.5 |