CVE

Id
31152  
CVE No.
CVE-2008-1035  
Status
Candidate  
Description
Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier.  
Phase
Assigned (20080226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
332087 31152 CVE-2008-1035 BUGTRAQ:20080521 CORE-2008-0126: Multiple vulnerabilities in iCal  View
332088 31152 CVE-2008-1035 URL:http://www.securityfocus.com/archive/1/archive/1/492414/100/0/threaded  View
332089 31152 CVE-2008-1035 BUGTRAQ:20080527 Re: CORE-2008-0126: Multiple vulnerabilities in iCal  View
332090 31152 CVE-2008-1035 URL:http://www.securityfocus.com/archive/1/archive/1/492638/100/100/threaded  View
332091 31152 CVE-2008-1035 BUGTRAQ:20080528 Re: CORE-2008-0126: Multiple vulnerabilities in iCal  View
332092 31152 CVE-2008-1035 URL:http://www.securityfocus.com/archive/1/archive/1/492682/100/0/threaded  View
332093 31152 CVE-2008-1035 MISC:http://www.coresecurity.com/?action=item&id=2219  View
332094 31152 CVE-2008-1035 APPLE:APPLE-SA-2008-05-28  View
332095 31152 CVE-2008-1035 URL:http://lists.apple.com/archives/security-announce/2008//May/msg00001.html  View
332096 31152 CVE-2008-1035 CERT:TA08-150A  View
332097 31152 CVE-2008-1035 URL:http://www.us-cert.gov/cas/techalerts/TA08-150A.html  View
332098 31152 CVE-2008-1035 BID:28633  View
332099 31152 CVE-2008-1035 URL:http://www.securityfocus.com/bid/28633  View
332100 31152 CVE-2008-1035 BID:29412  View
332101 31152 CVE-2008-1035 URL:http://www.securityfocus.com/bid/29412  View
332102 31152 CVE-2008-1035 BID:29486  View
332103 31152 CVE-2008-1035 URL:http://www.securityfocus.com/bid/29486  View
332104 31152 CVE-2008-1035 SECTRACK:1020095  View
332105 31152 CVE-2008-1035 URL:http://www.securitytracker.com/id?1020095  View
332106 31152 CVE-2008-1035 VUPEN:ADV-2008-1601  View
332107 31152 CVE-2008-1035 URL:http://www.vupen.com/english/advisories/2008/1601  View
332108 31152 CVE-2008-1035 VUPEN:ADV-2008-1697  View
332109 31152 CVE-2008-1035 URL:http://www.vupen.com/english/advisories/2008/1697  View
332110 31152 CVE-2008-1035 SECUNIA:30430  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50206 JVNDB-2008-005516 PORAR WEBBOARD の question.asp における SQL インジェクションの脆弱性 PORAR WEBBOARD の question.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2008-1039 31152 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005516.html  View