CVE-2003-0296 The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either intege...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ximian evolution | = 1.2.4 | No fix listed |
| debian/evolution(Debian:12) | < 1.3.2 | 1.3.2 |
| debian/evolution(Debian:13) | < 1.3.2 | 1.3.2 |
| debian/evolution(Debian:14) | < 1.3.2 | 1.3.2 |
References
- 20030514 Buffer overflows in multiple IMAP clients mailing-list
- Debian Security Tracker CVE-2003-0296 vendor-advisory