Core Security has published three iCal 3.0.1 vulnerabilities, the personal calendar application that ships with the MacOS X 10.5.1 operating system.

ical

Two of the vulnerabilities can crash the iCal program and one that could conceivably allow a hacker to take control of another person’s computer. So far, Apple has not released any patch via Software Update. For right now, users should not import untrusted iCal events or edit events that may be suspect until a fix is delivered by Apple.