CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584: Use After Free

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

Libical Heap Buffer Overflow Vulnerability

Libical is an open source implementation of the icalendar protocol and protocol data units. A stack buffer overflow vulnerability exists in libical. An attacker could exploit this vulnerability to crash an affected program, resulting in a denial of service...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

Libical Heap Out-of-Bounds Read Vulnerability

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

libical heap out-of-bounds read vulnerability (CNVD-2016-04384)

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

libical heap out-of-bounds read vulnerability (CNVD-2016-04383)

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

CVE-2016-5823

The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

CVE-2016-5825

The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...

CVE-2016-5826

The parsergetnextchar function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read by crafting a string to the icalparserparsestring function...

libical 0.47 / 1.0 Crash

Hello lists Attached is a test case for causing a crash in libical 0.47 shipped with Thunderbird and this was also tested against 1.0 various versions shipped with various email clients. ================================================================= ==24662==ERROR: AddressSanitizer: SEGV on...

PT-2017-10211

Name of the Vulnerable Software and Affected Versions libical affected versions not specified Description The issue allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file. Recommendations At the moment, there is no information abou...

PT-2017-8788

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted ics file. This is due to a problem in the icalparser parse string...

PT-2017-8789

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by crafting a string to the icalparser parse string function, which is related to the parser...

PT-2017-8787

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically a use-after-free error, by providing a crafted ics file. This is related to the icalproperty new clone function in the...

PT-2017-3928

Name of the Vulnerable Software and Affected Versions libical version 1.0 Thunderbird affected versions not specified Description The issue allows remote attackers to cause a denial of service. It is related to a use-after-free error, which can be triggered by a crafted ics file. The vulnerabilit...

PT-2017-8790

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted string to the icalparser parse string function, which is processed by...