CVE-2011-3253

CalDAV in Apple iOS before 5 does not validate X.509 certificates for SSL sessions, allowing MITM attackers to spoof calendar servers and obtain sensitive information via an arbitrary certificate. Affected: iOS

Design/Logic Flaw

Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE:...

Null pointer dereference

Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary code via a .ics file containing 1 a large 16-bit integer on a TRIGGER line, or 2 a large integer...

CVE-2008-2006

Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary code via a .ics file containing 1 a large 16-bit integer on a TRIGGER line, or 2 a large integer...

CVE-2008-2006

Summary of the CVE-2008-2006 family (Apple iCal) : The iCal client on Mac OS X 10.5.x (notably 3.0.1; affected up to 10.5.2; PoCs mention 3.0.1/3.0.2) contains multiple input-validation bugs in ICS parsing. Root causes include (1) integer overflow/null-pointer dereference on a COUNT value in an R...

CVE-2008-2006

Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary code via a .ics file containing 1 a large 16-bit integer on a TRIGGER line, or 2 a large integer...

Design/Logic Flaw

Unspecified vulnerability in Really Simple CalDAV Store RSCDS before 0.9.0 allows attackers to obtain sensitive information via unspecified vectors...

CVE-2007-5953

Unspecified vulnerability in Really Simple CalDAV Store RSCDS before 0.9.0 allows attackers to obtain sensitive information via unspecified vectors...

CVE-2007-5953

Technical details about CVE-2007-5953 are not provided in the included documents. Monitor for updates; the RSCDS project before 0.9.0 is described as allowing information disclosure via unspecified vectors.

CVE-2007-5953

Unspecified vulnerability in Really Simple CalDAV Store RSCDS before 0.9.0 allows attackers to obtain sensitive information via unspecified vectors...