Vulnerability Note VU#794752

Apple iChat AIM URI handler format string vulnerability

Depending on the user's browser, an attacker may be able to exploit this vulnerability by persuading a user to access a specially crafted web page. Some web browsers, such as Safari, automatically launch iChat to handle certain types of URIs. So, if a Safari user accesses a web page containing a specially crafted URI, iChat will be launched to process that URI. This may trigger the vulnerability.

II. Impact

Apple has addressed this issue with Apple Security Update 2007-002.

Systems Affected

https://www.securecoding.cert.org/confluence/x/WwE
http://www.us-cert.gov/reading_room/securing_browser/
http://projects.info-pull.com/moab/MOAB-20-01-2007.html
http://docs.info.apple.com/article.html?artnum=305102
http://secunia.com/advisories/24198/
http://securitytracker.com/alerts/2007/Feb/1017661.html
http://www.securityfocus.com/bid/22146

Credit

This vulnerability was publicly disclosed as part of the Month of Apple Bugs project.

This document was written by Jeff Gennari.

Other Information

If you have feedback, comments, or additional information about this vulnerability, please send us email.