CVE-2008-2006

Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a .ics file containing (1) a large 16-bit integer on a TRIGGER line, or (2) a large integer in a COUNT field on an RRULE line.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

9.65% chance of exploitation in the next 30 days, 95th percentile

Published

2008-05-22

Updated

2024-08-07

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/31619
• https://www.exploit-db.com/exploits/31613

References

• CVE Record
• NVD entry

Related

• CVE-2008-2005
• CVE-2008-2012
• CVE-2008-20001
• CVE-2008-2013
• CVE-2008-1996
• CVE-2008-2015