CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

CVE-2016-9584

CVE-2016-9584 affects libical, where parsing ICS files can trigger a use-after-free in the library, potentially leading to denial of service and heap memory exposure. Connected advisories and Nessus plugins consistently describe libical as the vulnerable component and reference the same use-after...

CVE-2016-9584: Use After Free

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

Libical Heap Buffer Overflow Vulnerability

Libical is an open source implementation of the icalendar protocol and protocol data units. A stack buffer overflow vulnerability exists in libical. An attacker could exploit this vulnerability to crash an affected program, resulting in a denial of service...

CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

libical heap out-of-bounds read vulnerability (CNVD-2016-04383)

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

libical heap out-of-bounds read vulnerability (CNVD-2016-04384)

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

Libical Heap Out-of-Bounds Read Vulnerability

libical is a set of open source for the implementation of iCalendar Calendar Data Exchange Standard protocols and protocol data units . A security vulnerability exists in libical. An attacker could exploit this vulnerability to cause a heap out-of-bounds read...

CVE-2016-5823

The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

CVE-2016-5825

The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...

CVE-2016-5826

The parsergetnextchar function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read by crafting a string to the icalparserparsestring function...

libical 0.47 / 1.0 Crash

Hello lists Attached is a test case for causing a crash in libical 0.47 shipped with Thunderbird and this was also tested against 1.0 various versions shipped with various email clients. ================================================================= ==24662==ERROR: AddressSanitizer: SEGV on...

PT-2017-10211

Name of the Vulnerable Software and Affected Versions libical affected versions not specified Description The issue allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file. Recommendations At the moment, there is no information abou...

PT-2017-8788

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted ics file. This is due to a problem in the icalparser parse string...

PT-2017-3928

Name of the Vulnerable Software and Affected Versions libical version 1.0 Thunderbird affected versions not specified Description The issue allows remote attackers to cause a denial of service. It is related to a use-after-free error, which can be triggered by a crafted ics file. The vulnerabilit...

PT-2017-8787

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically a use-after-free error, by providing a crafted ics file. This is related to the icalproperty new clone function in the...

PT-2017-8789

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by crafting a string to the icalparser parse string function, which is related to the parser...

PT-2017-8790

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted string to the icalparser parse string function, which is processed by...