medium5.0Public exploit code
CVE-2003-1263
ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibly due to an invalid method name.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- iCal 3.7 - Remote Buffer Overflow (PoC)2003-01-03 · dos · windows · Verified
- iCal 3.7 - HTTP Request Denial of Service2003-01-03 · dos · windows · Verified
Impact
ICAL.EXE in iCal 3.7 allows remote attackers to cause a denial of service (crash) via a malformed HTTP request, possibly due to an invalid method name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Brown Bear Software | Ical | Version 3.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2003-01/0011.html
- http://www.iss.net/security_center/static/10973.php
- http://www.securityfocus.com/bid/6505
- http://www.securityfocus.com/bid/6506
- http://archives.neohapsis.com/archives/bugtraq/2003-01/0011.html
- http://www.iss.net/security_center/static/10973.php
- http://www.securityfocus.com/bid/6505
- http://www.securityfocus.com/bid/6506