CVE-2008-0072 Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted messag...
MediumCVSS 6.8
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNOME evolution | <= 2.12.3 | No fix listed |
| debian/evolution(Debian:12) | < 2.12.3-1.1 | 2.12.3-1.1 |
| debian/evolution(Debian:13) | < 2.12.3-1.1 | 2.12.3-1.1 |
| debian/evolution(Debian:14) | < 2.12.3-1.1 | 2.12.3-1.1 |
References
- SUSE-SA:2008:014 vendor-advisory
- 29057 third-party-advisory vendor-advisory
- 29163 third-party-advisory vendor-advisory
- 29210 third-party-advisory vendor-advisory
- 29244 third-party-advisory vendor-advisory
- 29258 third-party-advisory vendor-advisory
- 29264 third-party-advisory vendor-advisory
- 29317 third-party-advisory vendor-advisory
- 30437 third-party-advisory vendor-advisory
- 30491 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- GLSA-200803-12 vendor-advisory
- wiki.rpath.com
- DSA-1512 patch vendor-advisory
- VU#512491 third-party-advisory us-government-resource
- MDVSA-2008:063 vendor-advisory
- RHSA-2008:0177 vendor-advisory
- RHSA-2008:0178 vendor-advisory
- 20080528 rPSA-2008-0105-1 evolution mailing-list
- 28102 vdb-entry
- 1019540 vdb-entry
- USN-583-1 vendor-advisory
- ADV-2008-0768 vdb-entry vendor-advisory
- evolution-emfmultipart-format-string(41011) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10701 signature vdb-entry
- FEDORA-2008-2290 vendor-advisory
- FEDORA-2008-2292 vendor-advisory
- Debian Security Tracker CVE-2008-0072 vendor-advisory