Apple Ichat vulnerabilities

8 CVEs affecting Apple Ichat, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3748, published 2007-08-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0021, published 2007-01-23. High severity, CVSS 7.5. EPSS: 23.1% chance of exploitation in the next 30 days. Format string vulnerability in Apple iChat 3.1.6 allows remote attackers to cause a denial of service (null pointer dereference and application crash) and possibly execute arbitrary code via format…
CVE-2007-0614, published 2007-01-31. High severity, CVSS 7.8. EPSS: 8.6% chance of exploitation in the next 30 days. The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (persistent application crash)…
CVE-2007-0613, published 2007-01-31. Medium severity, CVSS 5.0. EPSS: 7.4% chance of exploitation in the next 30 days. The Bonjour functionality in mDNSResponder, iChat 3.1.6, and InstantMessage framework 428 in Apple Mac OS X 10.4.8 does not check for duplicate entries when adding newly discovered available…
CVE-2007-0710, published 2007-02-16. Low severity, CVSS 2.1. EPSS: 3.4% chance of exploitation in the next 30 days. The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persistent application crash) via unspecified vectors, possibly related to…
CVE-2007-3747, published 2007-08-03. Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days. The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap addresses, which allows remote attackers to execute…
CVE-2007-3746, published 2007-08-03. Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days. The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not properly check the bounds of heap read and write operations, which allows remote attackers to execute arbitrary code via…
CVE-2007-3748, published 2007-08-03. Medium severity, CVSS 5.4. EPSS: 2.2% chance of exploitation in the next 30 days. Buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in iChat on Apple Mac OS X 10.3.9 and 10.4.10 allows network-adjacent remote attackers to…
CVE-2004-0873, published 2004-12-23. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.