PT-2003-2208 · Apple · Ical
Published
2003-12-31
·
Updated
2008-09-05
·
CVE-2003-1263
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
iCal version 3.7
Description
The issue allows remote attackers to cause a denial of service, resulting in a crash, via a malformed HTTP request. This could be due to an invalid method name.
Recommendations
For iCal version 3.7, consider restricting access to the ICAL.EXE component to minimize the risk of exploitation until a patch is available.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ical