Red Hat Security AdvisoryRHSA-2008:0515
evolution28 security update
Released 2008-06-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 evolution28-2.8.0-53.el4_6.3, evolution28-2.8.0-53.el4_6.3.i386, evolution28-2.8.0-53.el4_6.3.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 evolution28-2.8.0-53.el4_6.3, evolution28-2.8.0-53.el4_6.3.i386, evolution28-devel-2.8.0-53.el4_6.3 +1
- Red Hat Enterprise Linux ES version 4 evolution28-2.8.0-53.el4_6.3, evolution28-2.8.0-53.el4_6.3.i386, evolution28-2.8.0-53.el4_6.3.ia64 +3
- Red Hat Enterprise Linux WS version 4 evolution28-2.8.0-53.el4_6.3, evolution28-2.8.0-53.el4_6.3.i386, evolution28-2.8.0-53.el4_6.3.ia64 +3
Fixes 2 records
Priority MEDIUM 49
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in t…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05748 · Published 2008-06-04 · Fixed CWE-119
Priority MEDIUM 42
Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05694 · Published 2008-06-04 · Fixed CWE-119
