CVE-2007-0344

Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.

• CWE-134

• http://projects.info-pull.com/moab/MOAB-16-01-2007.htmlExploit
• http://secunia.com/advisories/23801Patch, Vendor Advisory
• http://www.osvdb.org/32688
• http://www.securityfocus.com/bid/22086Exploit, Patch
• http://www.vupen.com/english/advisories/2007/0238Vendor Advisory
• https://www.exploit-db.com/exploits/3139
• http://projects.info-pull.com/moab/MOAB-16-01-2007.htmlExploit
• http://secunia.com/advisories/23801Patch, Vendor Advisory
• http://www.osvdb.org/32688
• http://www.securityfocus.com/bid/22086Exploit, Patch
• http://www.vupen.com/english/advisories/2007/0238Vendor Advisory
• https://www.exploit-db.com/exploits/3139

Published

Jan 18, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0338Heap-based buffer overflow in Dream FTP Server allows remote…
• CVE-2007-0339SQL injection vulnerability in index.php (aka the login form…
• CVE-2007-0340SQL injection vulnerability in inc/header.inc.php in ThWboar…
• CVE-2007-0341Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1…
• CVE-2007-0342WebCore in Apple WebKit build 18794 allows remote attackers …7.5
• CVE-2007-0343OpenBSD before 20070116 allows remote attackers to cause a d…
• CVE-2007-0345The (1) Activity Monitor.app/Contents/Resources/pmTool, (2) …
• CVE-2007-0346SQL injection vulnerability in index.php in SmE FileMailer 1…
• CVE-2007-0347The is_eow function in format.c in CVSTrac before 2.0.1 does…
• CVE-2007-0348Stack-based buffer overflow in the IASystemInfo.dll ActiveX …
• CVE-2007-0349Directory traversal vulnerability in upgrade.php in nicecode…
• CVE-2007-0350Multiple SQL injection vulnerabilities in (a) index.php and …