Red Hat Security AdvisoryRHSA-2008:0516
evolution security update
Released 2008-06-04 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 evolution-1.4.5-22.el3, evolution-1.4.5-22.el3.i386, evolution-devel-1.4.5-22.el3 +1
- Red Hat Enterprise Linux AS version 3 evolution-1.4.5-22.el3, evolution-1.4.5-22.el3.i386, evolution-1.4.5-22.el3.ia64 +5
- Red Hat Enterprise Linux AS version 4 evolution-2.0.2-35.0.4.el4_6.2, evolution-2.0.2-35.0.4.el4_6.2.i386, evolution-2.0.2-35.0.4.el4_6.2.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 evolution-2.0.2-35.0.4.el4_6.2, evolution-2.0.2-35.0.4.el4_6.2.i386, evolution-devel-2.0.2-35.0.4.el4_6.2 +1
- Red Hat Enterprise Linux ES version 3 evolution-1.4.5-22.el3, evolution-1.4.5-22.el3.i386, evolution-1.4.5-22.el3.ia64 +3
- Red Hat Enterprise Linux ES version 4 evolution-2.0.2-35.0.4.el4_6.2, evolution-2.0.2-35.0.4.el4_6.2.i386, evolution-2.0.2-35.0.4.el4_6.2.ia64 +3
- Red Hat Enterprise Linux WS version 3 evolution-1.4.5-22.el3, evolution-1.4.5-22.el3.i386, evolution-1.4.5-22.el3.ia64 +3
- Red Hat Enterprise Linux WS version 4 evolution-2.0.2-35.0.4.el4_6.2, evolution-2.0.2-35.0.4.el4_6.2.i386, evolution-2.0.2-35.0.4.el4_6.2.ia64 +3
Fixes 1 record
Priority MEDIUM 42
Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05694 · Published 2008-06-04 · Fixed CWE-119
