CVE-2005-0102 Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte....
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME evolution | <= 2.0.2 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| debian/evolution(Debian:12) | < 2.0.3-1.2 | 2.0.3-1.2 |
| debian/evolution(Debian:13) | < 2.0.3-1.2 | 2.0.3-1.2 |
| debian/evolution(Debian:14) | < 2.0.3-1.2 | 2.0.3-1.2 |
References
- CLA-2005:925 broken-link patch vendor-advisory
- 13830 broken-link third-party-advisory
- GLSA-200501-35 third-party-advisory vendor-advisory
- 1012981 broken-link third-party-advisory vdb-entry
- DSA-673 mailing-list patch third-party-advisory vendor-advisory
- MDKSA-2005:024 third-party-advisory vendor-advisory
- RHSA-2005:238 broken-link vendor-advisory
- RHSA-2005:397 broken-link patch vendor-advisory
- 12354 broken-link patch third-party-advisory vdb-entry vendor-advisory
- evolution-camellockhelper-bo(19031) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:9616 broken-link signature vdb-entry
- USN-69-1 broken-link vendor-advisory
- Debian Security Tracker CVE-2005-0102 vendor-advisory
- bugs.debian.org issue-tracking