CVE-2011-3201 GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
MediumCVSS 4.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/evolution(Debian:12) | All versions | No fix listed |
| debian/evolution(Debian:12) | = 3.46.4-2 | No fix listed |
| debian/evolution(Debian:12) | = 3.46.4-2+deb12u1 | No fix listed |
| debian/evolution(Debian:12) | = 3.47.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.47.3-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.48.0-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.48.1-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.48.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.48.3-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.48.4-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.49.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.49.2-2 | No fix listed |
| debian/evolution(Debian:12) | = 3.49.2-3 | No fix listed |
| debian/evolution(Debian:12) | = 3.49.3-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.50.0-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.50.1-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.50.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.50.3-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.51.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.52.0-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.52.1-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.52.1-2 | No fix listed |
| debian/evolution(Debian:12) | = 3.52.1-3 | No fix listed |
| debian/evolution(Debian:12) | = 3.52.1-4 | No fix listed |
| debian/evolution(Debian:12) | = 3.52.2-1 | No fix listed |
Show 106 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/evolution(Debian:12) | = 3.52.2-2 | No fix listed |
| debian/evolution(Debian:12) | = 3.52.3-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.53.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.53.3-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.54.0-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.54.1-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.54.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.54.3-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.54.3-2 | No fix listed |
| debian/evolution(Debian:12) | = 3.55.1-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.55.1-2 | No fix listed |
| debian/evolution(Debian:12) | = 3.55.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.55.3-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.0-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.1-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-10 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-2 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-3 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-4 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-5 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-7 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-8 | No fix listed |
| debian/evolution(Debian:12) | = 3.56.2-9 | No fix listed |
| debian/evolution(Debian:12) | = 3.62.0-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.62.1-1 | No fix listed |
| debian/evolution(Debian:12) | = 3.62.1-2 | No fix listed |
| debian/evolution(Debian:13) | All versions | No fix listed |
| debian/evolution(Debian:13) | = 3.56.1-1 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.1-1+deb13u1 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-0+deb13u1 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-1 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-10 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-2 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-3 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-4 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-5 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-7 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-8 | No fix listed |
| debian/evolution(Debian:13) | = 3.56.2-9 | No fix listed |
| debian/evolution(Debian:13) | = 3.62.0-1 | No fix listed |
| debian/evolution(Debian:13) | = 3.62.1-1 | No fix listed |
| debian/evolution(Debian:13) | = 3.62.1-2 | No fix listed |
| debian/evolution(Debian:14) | All versions | No fix listed |
| debian/evolution(Debian:14) | = 3.56.1-1 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-1 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-10 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-2 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-3 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-4 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-5 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-7 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-8 | No fix listed |
| debian/evolution(Debian:14) | = 3.56.2-9 | No fix listed |
| debian/evolution(Debian:14) | = 3.62.0-1 | No fix listed |
| debian/evolution(Debian:14) | = 3.62.1-1 | No fix listed |
| debian/evolution(Debian:14) | = 3.62.1-2 | No fix listed |
| oracle solaris | = 11.2 | No fix listed |
| GNOME evolution | <= 3.0.3 | No fix listed |
| GNOME evolution | = 1.0.8 | No fix listed |
| GNOME evolution | = 1.2 | No fix listed |
| GNOME evolution | = 1.2.1 | No fix listed |
| GNOME evolution | = 1.2.2 | No fix listed |
| GNOME evolution | = 1.2.3 | No fix listed |
| GNOME evolution | = 1.2.4 | No fix listed |
| GNOME evolution | = 1.4 | No fix listed |
| GNOME evolution | = 1.4.3 | No fix listed |
| GNOME evolution | = 1.4.4 | No fix listed |
| GNOME evolution | = 1.4.5 | No fix listed |
| GNOME evolution | = 1.4.6 | No fix listed |
| GNOME evolution | = 1.5 | No fix listed |
| GNOME evolution | = 1.11 | No fix listed |
| GNOME evolution | = 2.0 | No fix listed |
| GNOME evolution | = 2.0.0 | No fix listed |
| GNOME evolution | = 2.0.1 | No fix listed |
| GNOME evolution | = 2.0.2 | No fix listed |
| GNOME evolution | = 2.1 | No fix listed |
| GNOME evolution | = 2.2 | No fix listed |
| GNOME evolution | = 2.2.1 | No fix listed |
| GNOME evolution | = 2.3.1 | No fix listed |
| GNOME evolution | = 2.3.2 | No fix listed |
| GNOME evolution | = 2.3.3 | No fix listed |
| GNOME evolution | = 2.3.4 | No fix listed |
| GNOME evolution | = 2.3.5 | No fix listed |
| GNOME evolution | = 2.3.6 | No fix listed |
| GNOME evolution | = 2.3.6.1 | No fix listed |
| GNOME evolution | = 2.3.7 | No fix listed |
| GNOME evolution | = 2.4 | No fix listed |
| GNOME evolution | = 2.4.2.1 | No fix listed |
| GNOME evolution | = 2.6 | No fix listed |
| GNOME evolution | = 2.8.1 | No fix listed |
| GNOME evolution | = 2.10.3 | No fix listed |
| GNOME evolution | = 2.12 | No fix listed |
| GNOME evolution | = 2.12.3 | No fix listed |
| GNOME evolution | = 2.22.1 | No fix listed |
| GNOME evolution | = 2.22.3 | No fix listed |
| GNOME evolution | = 2.24 | No fix listed |
| GNOME evolution | = 2.24.5 | No fix listed |
| GNOME evolution | = 2.26.1 | No fix listed |
| GNOME evolution | = 2.26.3 | No fix listed |
| GNOME evolution | = 2.28.3.1 | No fix listed |
| GNOME evolution | = 2.30.3 | No fix listed |
| GNOME evolution | = 2.32.3 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- Debian Security Tracker CVE-2011-3201 vendor-advisory
- RHSA-2013:0516 third-party-advisory vendor-advisory
- www.oracle.com third-party-advisory
- bugzilla.gnome.org issue-tracking
- bugzilla.redhat.com issue-tracking patch vendor-advisory
- evolution-mailto-info-disclosure(82450) vdb-entry
- git.gnome.org patch vendor-advisory
- git.gnome.org patch vendor-advisory