Core Security has published three Mac OS X iCal-based vulnerabilities — two that can crash the iCal program and one that could conceivably allow a hacker to take control of another person’s computer. The newly publicized exploits have gained attention recently in part because of the way in which they’ve been presented. Core Security, perhaps attempting to spur Apple into action, posted the flaws on the Web for all to see after attempting to work with Apple for several months to work out a patch. The severity of the flaws is somewhat debatable, yet they certainly exist.
