CVE-2002-1765 Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header.
MediumCVSS 5.0
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ximian evolution | = 1.0.3 | No fix listed |
| ximian evolution | = 1.0.4 | No fix listed |
| debian/evolution(Debian:12) | < 1.0.5 | 1.0.5 |
| debian/evolution(Debian:13) | < 1.0.5 | 1.0.5 |
| debian/evolution(Debian:14) | < 1.0.5 | 1.0.5 |
References
- [gnome-announce] 20020503 Patch for serious bug in 1.0.3 mailing-list patch
- CLA-2002:486 patch vendor-advisory
- RHBA-2002:080 patch vendor-advisory
- 4715 patch vdb-entry
- evolution-mime-header-dos(9059) vdb-entry
- Debian Security Tracker CVE-2002-1765 vendor-advisory