CVE-2007-0645: Apple Iphoto

Medium severity, CVSS 6.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling certain Apple AppKit functions.

Affected products

• Apple Iphoto: version 6.0.5 only

Published 2007-02-01. Last modified 2026-06-16.