Security Details on Apple iCal v1.5.4 Updater

2004–09November 23, 2004Macs Only!Software
The update came out at about 5pm ET yesterday and is available for download via the Software Update preference pane or from this Apple web page. Here is what the Read Me file says:

iCal 1.5.4 includes security enhancements to help protect your computer when importing events with alarms that open files or applications.

Here are the details on the included security enhancements:

CVE-ID: CAN-2004-1021

Availability: iCal 1.5.4 is available for Mac OS X v10.2.3 or later

Impact: New iCal calendars may add alarms without approval

Description: iCal calendars may include notification of events via
alarms. These alarms may open programs and send e-mail. iCal has
been updated to show an alert window when importing or opening
calendars containing alarms. Credit to aaron@vtty.com for reporting
this issue.

We updated all of our iCal installations without problem. [Bill Fox & Dana Baggett]


Saw something? Send a tip

The archive ran on reader tips. What did you see, where, and do you want the credit?

Read by the editor. Never published without your say.

More in Software · This month in the archive