Sign-up

ID

VAR-200503-0156


CVE

CVE-2004-1021


TITLE

Apple iCal Calendar Import Alarm Reminder Vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200503-016

DESCRIPTION

iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms. It is reported that when importing an Apple iCal calendar, iCal fails to warn an end user if the calendar contains an alarm. This may result in a victim importing a calendar that is believed to be safe when in reality the calendar contains malicious alarm entries

Trust: 1.26

sources: NVD: CVE-2004-1021 // BID: 11728 // VULHUB: VHN-9451

AFFECTED PRODUCTS

vendor:applemodel:icalscope:eqversion:1.5.3

Trust: 1.9

vendor:applemodel:icalscope:neversion:1.5.4

Trust: 0.3

sources: BID: 11728 // CNNVD: CNNVD-200503-016 // NVD: CVE-2004-1021

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2004-1021
value: HIGH

Trust: 1.0

CNNVD: CNNVD-200503-016
value: HIGH

Trust: 0.6

VULHUB: VHN-9451
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2004-1021
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-9451
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-9451 // CNNVD: CNNVD-200503-016 // NVD: CVE-2004-1021

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-1021

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200503-016

TYPE

Design Error

Trust: 0.9

sources: BID: 11728 // CNNVD: CNNVD-200503-016

EXTERNAL IDS

db:NVDid:CVE-2004-1021

Trust: 2.0

db:CNNVDid:CNNVD-200503-016

Trust: 0.7

db:XFid:18209

Trust: 0.6

db:APPLEid:APPLE-SA-2004-11-22

Trust: 0.6

db:BIDid:11728

Trust: 0.4

db:VULHUBid:VHN-9451

Trust: 0.1

sources: VULHUB: VHN-9451 // BID: 11728 // CNNVD: CNNVD-200503-016 // NVD: CVE-2004-1021

REFERENCES

url:http://lists.apple.com/archives/security-announce//2004/nov/msg00000.html

Trust: 1.7

url:https://exchange.xforce.ibmcloud.com/vulnerabilities/18209

Trust: 1.1

url:http://xforce.iss.net/xforce/xfdb/18209

Trust: 0.6

url:http://www.apple.com/ical/

Trust: 0.3

sources: VULHUB: VHN-9451 // BID: 11728 // CNNVD: CNNVD-200503-016 // NVD: CVE-2004-1021

CREDITS

Apple

Trust: 0.6

sources: CNNVD: CNNVD-200503-016

SOURCES

db:VULHUBid:VHN-9451
db:BIDid:11728
db:CNNVDid:CNNVD-200503-016
db:NVDid:CVE-2004-1021

LAST UPDATE DATE

2024-08-14T14:08:51.503000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-9451date:2017-07-11T00:00:00
db:BIDid:11728date:2009-07-12T08:06:00
db:CNNVDid:CNNVD-200503-016date:2005-10-20T00:00:00
db:NVDid:CVE-2004-1021date:2017-07-11T01:30:40.153

SOURCES RELEASE DATE

db:VULHUBid:VHN-9451date:2005-03-01T00:00:00
db:BIDid:11728date:2004-11-22T00:00:00
db:CNNVDid:CNNVD-200503-016date:2005-03-01T00:00:00
db:NVDid:CVE-2004-1021date:2005-03-01T05:00:00