First published: Fri Jan 27 2017(Updated: )
The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted ics file.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
libical | =0.47 | |
libical | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-5825 has a severity rating of medium due to the potential for denial of service.
To fix CVE-2016-5825, upgrade to libical version 1.1 or later.
The impact of CVE-2016-5825 includes the potential for an out-of-bounds heap read leading to denial of service.
CVE-2016-5825 affects libical versions 0.47 and 1.0.
Yes, CVE-2016-5825 can be exploited remotely using a crafted ICS file.