CVE-2007-0646

The record

Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling the NSRunCriticalAlertPanel Apple AppKit function.

Affected packages

Related vulnerabilities

• CVE-2026-63073 Issue summary: OpenSSL CMP response validation passed an unexpected response sender… CWE-134
• CVE-2026-6390 A flaw was found in GNU nano's multi-buffer error message handling. CWE-134
• CVE-2026-57877 An unauthenticated format string vulnerability exists in vlsvr in GeoVision GV-LPC2011… CWE-134
• CVE-2026-10828 A format string vulnerability has been found in the "alias" parameter of the Serial Param… CWE-134
• CVE-2025-10262 Nokia SR Linux is vulnerable to local privilege escalation vulnerability due to… CWE-134
• CVE-2026-12174 A security vulnerability has been detected in D-Link DCS-935L 1.10.01. CWE-134
• CVE-2026-6250 An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2… CWE-134
• CVE-2026-6241 An authenticated format string vulnerability is present in the ONVIF AddScopes in Tapo… CWE-134