CVE-2008-1035

published 2008-06-03

CVE-2008-1035: Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I N A P

EXPLOIT

Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
apple	ical	—	—

CWE-94