MiracleLinux 4 : thunderbird-60.7.2-2.AXS4 (AXSA:2019-3916:03)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3916:03 advisory. Mozilla: Type confusion in Array.pop CVE-2019-11707 thunderbird: Stack buffer overflow in icalrecuraddbydayrules in icalrecur.c CVE-2019-11705...

PT-2024-40793

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of "Use-of-uninitialized-value". The crash state involves several functions: icalmemory strdup, icalparameter new from...

PT-2022-37034

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow crash. Technical details about the crash include the simple str to double function, icalvalue new from stri...

PT-2020-22478

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 2 crash has been reported. The crash involves the functions icalparameter new from value string, icalparser add line, and...

PT-2020-22368

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following sequence: icalcomponent remove component,...

PT-2020-22396

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the following functions: parser get next char, parser get...

Denial Of Service (DoS)

libical is vulnerable to denial of service DoS attacks. The vulnerability exists as the icalparser failed to check if the value type is valid before parsing it, causing a denial of service DoS attack when parsing a malicious ics file...

PT-2017-8788

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted ics file. This is due to a problem in the icalparser parse string...

PT-2017-8789

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by crafting a string to the icalparser parse string function, which is related to the parser...

PT-2017-8790

Name of the Vulnerable Software and Affected Versions libical versions 0.47 through 1.0 Description The issue allows remote attackers to cause a denial of service, specifically an out-of-bounds heap read, by providing a crafted string to the icalparser parse string function, which is processed by...