CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

CVE-2016-9584 affects libical, where parsing ICS files can trigger a use-after-free in the library, potentially leading to denial of service and heap memory exposure. Connected advisories and Nessus plugins consistently describe libical as the vulnerable component and reference the same use-after...

CVE-2016-9584: Use After Free

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-5823

The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

CVE-2016-5825

The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...

Sunbird 0.9 Array Overrun

Sunbird 0.9 Array Overrun code execution Author: Maksymilian Arciemowicz and sp3x http://SecurityReason.com Date: - Dis.: 07.05.2009 - Pub.: 11.12.2009 CVE: CVE-2009-0689 CWE: CWE-199 Risk: High Remote: Yes Affected Software: - Sunbird 0.9 NOTE: Prior versions may also be affected. Original URL:...

CVE-2008-1035

Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE:...

CVE-2008-1035: Improper Control of Generation of Code

Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE:...

Null pointer dereference

Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary code via a .ics file containing 1 a large 16-bit integer on a TRIGGER line, or 2 a large integer...

CVE-2008-2006

Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service NULL pointer dereference and application crash or possibly execute arbitrary code via a .ics file containing 1 a large 16-bit integer on a TRIGGER line, or 2 a large integer...

Apple iCAL multiple security vulnerabilities

Multiple vulnerabilities on .ics files parsing...

CVE-2007-4247

Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...

Design/Logic Flaw

Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...

CVE-2007-4247

Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...

CVE-2007-4247: Undefined Security Weakness

Windows Calendar on Microsoft Windows Vista allows remote attackers to cause a denial of service NULL dereference and persistent application crash via a malformed ICS file...

CVE-2007-0033

Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file...

Design/Logic Flaw

Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file...

CVE-2007-0033

CVE-2007-0033 is a memory corruption/remote code execution vulnerability in Microsoft Outlook 2002 and 2003 triggered by parsing a malformed VEVENT record in an iCalendar (.ics) file or meeting request. The flaw arises from inadequate validation when processing VEVENT data, enabling a user-assist...

CVE-2007-0033: Undefined Security Weakness

Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file...