Published: 22/05/2008 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 440

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a .ics file containing (1) a large 16-bit integer on a TRIGGER line, or (2) a large integer in a COUNT field on an RRULE line.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple ical 3.0.1

Core Security Technologies Advisory - Three vulnerabilities discovered in the iCal application may allow un-authenticated attackers to execute arbitrary code on vulnerable systems with (and potentially without) the assistance from the end user of the application and may cause a denial of service condition iCal version 301 on MacOS X 1051 (Leop ...

source: wwwsecurityfocuscom/bid/28632/info Apple iCal is prone to a denial-of-service vulnerability because it fails to handle specially crafted files An attacker can exploit this issue to crash the affected application, denying service to legitimate users This issue affects iCal 301 running on Mac OS X 1051; previous versions may ...

source: wwwsecurityfocuscom/bid/28629/info Apple iCal is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun An attacker can exploit this issue to execute arbitrary code within the context of the affected application Failed exploit attempts will result in a denial-of-service conditio ...

CWE-20 http://www.coresecurity.com/?action=item&id=2219 http://www.securityfocus.com/bid/28632 http://www.securityfocus.com/bid/28629 http://securityreason.com/securityalert/3901 http://www.securitytracker.com/id?1020094 http://www.vupen.com/english/advisories/2008/1601 https://exchange.xforce.ibmcloud.com/vulnerabilities/42569 http://www.securityfocus.com/archive/1/492682/100/0/threaded http://www.securityfocus.com/archive/1/492638/100/100/threaded http://www.securityfocus.com/archive/1/492414/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/66599/Core-Security-Technologies-Advisory-2008.0126.html https://www.exploit-db.com/exploits/31619/

CVE-2008-2006

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect