Red Hat Security AdvisoryRHSA-2013:0516
evolution security and bug fix update
Released 2013-02-20 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) evolution-2.28.3-30.el6, evolution-help-2.28.3-30.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) evolution-2.28.3-30.el6, evolution-conduits-2.28.3-30.el6, evolution-devel-2.28.3-30.el6 +3
- Red Hat Enterprise Linux Server Optional (v. 6) evolution-2.28.3-30.el6, evolution-2.28.3-30.el6.ppc, evolution-conduits-2.28.3-30.el6 +7
- Red Hat Enterprise Linux Workstation (v. 6) evolution-2.28.3-30.el6, evolution-help-2.28.3-30.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) evolution-2.28.3-30.el6, evolution-conduits-2.28.3-30.el6, evolution-devel-2.28.3-30.el6 +3
Fixes 1 record
Priority LOW 25
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02673 · Published 2013-03-08 · Partial fix CWE-200
