iCal vulnerabilities put Mac OS X users at risk

May 21, 2008 (Wednesday) | MacOS X

Heads up to Mac OS X users:  It appears Apple will be shipping high-priority security patches sometime today. (See important update at the end) According to a security alert from vulnerability research and pen testing firm Core Security, Apple is about to release patches for three remotely exploitable security vulnerabilities in iCal, the personal calendar application that ships on Mac OS X. The Core advisory was coordinated with Apple's security team so it's a safe bet we will see a big software update later today with patches for multiple vulnerabilities. From Core's alert (not yet available online): The vulnerabilities are caused due to iCal not properly sanitizing certain fields on iCal calendar files (.ics). This can be possibly exploited to...