Apple Ical vulnerabilities

3 CVEs affecting Apple Ical, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-1035, published 2008-06-03.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-1035, published 2008-06-03. Medium severity, CVSS 4.3. EPSS: 10.1% chance of exploitation in the next 30 days. Use-after-free vulnerability in Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to trigger memory corruption or possibly execute arbitrary code via an…
CVE-2008-2006, published 2008-05-22. Medium severity, CVSS 4.3. EPSS: 9.7% chance of exploitation in the next 30 days. Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service (NULL pointer dereference and application crash) or possibly execute…
CVE-2004-1021, published 2005-03-01. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms.