CVE-2016-5824

Name of the Vulnerable Software and Affected Versions libical version 1.0 Thunderbird (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service. It is related to a use-after-free error, which can be triggered by a crafted ics file. The vulnerability is also associated with a memory usage issue after release, potentially enabling a remote attacker to cause a service disruption.

Recommendations For libical version 1.0, update to a version that fixes the use-after-free error. For Thunderbird, at the moment, there is no information about a newer version that contains a fix for this vulnerability.