8 results · Feed
-
Medium 6.1
libical through 4.0.6 Heap Out-of-Bounds Read via icalvalue_decode_ical_string
libical through 4.0.6 contains a heap-based out-of-bounds read in icalvalue_decode_ical_string() in src/libical/icalvalue.c when decoding input ending in a backslash. Attackers can supply escaped iCalendar text with a trailing backslash, causing the loop to r…
-
Medium 6.2
libical 4.0.6 contains an incompatible function pointer in icalparameter_string_to_kind(). When parsing iCalendar data …
-
Unscored —
The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-…
-
Unscored —
The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-a…
-
Unscored —
libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
-
Unscored —
The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-…
-
Unscored —
The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-…
-
Unscored —
libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a craft…