Skip to content
Fencer Vulns
high 7.5

CVE-2007-0344 json

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attack…

published 2007-01-18 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-0346

cvss
7.5
version 2.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
6.7%
EPSS 6.7% chance of exploitation in 30 days, percentile 93%
public exploits
1
Exploit-DB

Summary

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.

Patch / fix

Timeline

  1. First public exploit (EDB-3139)
  2. Published

Exploit prediction

6.65% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-3139 Colloquy 2.1.3545 - 'INVITE' Format String Denial of Service dos, 2007-01-17
  • securityfocus.com http://www.securityfocus.com/bid/22086 referenced PoC, tagged "exploit" by a source, unverified
  • projects.info-pull.com http://projects.info-pull.com/moab/MOAB-16-01-2007.html referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
NVD 2.0 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P

Classification

Weakness
  • CWE-134 Use of Externally-Controlled Format String

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.