Red Hat Security AdvisoryRHSA-2008:0514
evolution security update
Released 2008-06-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 5 client) evolution-2.12.3-8.el5_2.2, evolution-2.12.3-8.el5_2.2.i386, evolution-help-2.12.3-8.el5_2.2 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) evolution-2.12.3-8.el5_2.2, evolution-devel-2.12.3-8.el5_2.2, evolution-devel-2.12.3-8.el5_2.2.i386
- Red Hat Enterprise Linux Optional Productivity Applications (v. 5 server) evolution-2.12.3-8.el5_2.2, evolution-2.12.3-8.el5_2.2.i386, evolution-devel-2.12.3-8.el5_2.2 +3
Fixes 2 records
Priority MEDIUM 49
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in t…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05748 · Published 2008-06-04 · Fixed CWE-119
Priority MEDIUM 42
Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05694 · Published 2008-06-04 · Fixed CWE-119
