VYPR

by Apple Inc.

CVEs (2)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2007-06460.040.17Feb 1, 2007Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to cause a denial of service (crash) via format string specifiers in a filename, which is not properly handled when calling the NSRunCriticalAlertPanel Apple AppKit function.
CVE-2021-307570.000.00Sep 8, 2021This issue was addressed by enabling hardened runtime. This issue is fixed in iMovie 10.2.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.