Description
Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.vupen.com/english/advisories/2008/1601 ↗
- http://www.coresecurity.com/?action=item&id=2219 ↗
- http://www.securityfocus.com/bid/28633 ↗
- http://www.securityfocus.com/archive/1/492682/100/0/threaded ↗
- http://www.securityfocus.com/archive/1/492638/100/100/threaded ↗
- http://www.us-cert.gov/cas/techalerts/TA08-150A.html ↗
- http://www.securityfocus.com/bid/29486 ↗
- http://secunia.com/advisories/30430 ↗
- http://lists.apple.com/archives/security-announce/2008//May/msg00001.html ↗
- http://www.securityfocus.com/archive/1/492414/100/0/threaded ↗
- http://www.securitytracker.com/id?1020095 ↗
- http://www.vupen.com/english/advisories/2008/1697 ↗
- http://www.securityfocus.com/bid/29412 ↗