NVD

Id
996  
Name
CVE-2008-1035  
Description
Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an "ATTACH;VALUE=URI:S=osumi" line in a .ics file, which triggers a "resource liberation" bug. NOTE: CVE-2008-2007 was originally used for this issue, but this is the appropriate identifier.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-06-03  
Modified Date
2011-03-07  
Seq
2008-1035  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6128 996 CVE-2008-1035 APPLE-SA-2008-05-28  View
6129 996 CVE-2008-1035 http://www.coresecurity.com/?action=item&id=2219  View
6130 996 CVE-2008-1035 20080521 CORE-2008-0126: Multiple vulnerabilities in iCal  View
6131 996 CVE-2008-1035 20080527 Re: CORE-2008-0126: Multiple vulnerabilities in iCal  View
6132 996 CVE-2008-1035 20080528 Re: CORE-2008-0126: Multiple vulnerabilities in iCal  View
6133 996 CVE-2008-1035 28633  View
6134 996 CVE-2008-1035 29412  View
6135 996 CVE-2008-1035 29486  View
6136 996 CVE-2008-1035 1020095  View
6137 996 CVE-2008-1035 TA08-150A  View
6138 996 CVE-2008-1035 ADV-2008-1601  View
6139 996 CVE-2008-1035 ADV-2008-1697  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46095 JVNDB-2008-001405 Apple Mac OS X の Apple iCal におけるメモリ破壊の脆弱性 Apple Mac OS X の Apple iCal には、.ics ファイル内の “ATTACH;VALUE=URI:S=osumi” 行の処理に不備があるため、メモリリソースにおいて解放した領域を使用する脆弱性が存在します。 CVE-2008-1035 31148 CVE-2008-1035 996 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001405.html 2008-05-28 2008-06-25 View