Apple.iCal.TRIGGER.Parameter.DoS

Description

This indicates an attack attempt against a Denial-of-Service vulnerability in Apple iCal.
The vulnerability is caused by the failure to handle specially crafted ICS files. The application fails to properly check the value of the 'TRIGGER' parameter. An attacker can exploit this issue by enticing an unsuspecting victim to import a malicious '.ics' file.

Affected Products

Apple iCal 3.0.1

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://www.apple.com/macosx/

References