Lucene search

K
cve[email protected]CVE-2003-0130
HistoryMar 24, 2003 - 5:00 a.m.

CVE-2003-0130

2003-03-2405:00:00
NVD-CWE-Other
web.nvd.nist.gov
33
ximian evolution
mail user agent
cve-2003-0130
security vulnerability
html injection
nvd

6.7 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.025 Low

EPSS

Percentile

89.9%

The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.

6.7 Medium

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.025 Low

EPSS

Percentile

89.9%