Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Colloquy INVITE Request 多个格式化字符串漏洞
Vulnerability Description
Colloquy 2.1及之前版本的(1)_invitedToRoom:和(2)_invitedToDirectChat:中存在多个格式化字符串漏洞。远程攻击者可以借助INVITE请求的频道名中的格式化字符串分类符，引起拒绝服务攻击(应用程序崩溃)以及可能执行任意代码。该漏洞与在Apple AppKit中对AlertSheet和AlertPanel的执行有关。
CVSS Information
N/A
Vulnerability Type
N/A