• info
• discussion
• exploit
• solution
• references

Apple iPhoto Photocast Subscription Remote Format String Vulnerability

iPhoto is prone to a format-string vulnerability.

Exploiting this issue will allow attackers to execute arbitrary code with the permissions of a user running the application. Failed attacks will likely cause denial-of-service conditions.

This issue affects versions prior to iPhoto 7.1.2.