CVE-2005-2549

2005-08-1204:00:00

Debian Security Bug Tracker

security-tracker.debian.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.083 Low

EPSS

Percentile

94.3%

JSON

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.

OSVersionArchitecturePackageVersionFilename
Debian12allevolution< 2.2.3-3evolution_2.2.3-3_all.deb
Debian11allevolution< 2.2.3-3evolution_2.2.3-3_all.deb
Debian10allevolution< 2.2.3-3evolution_2.2.3-3_all.deb
Debian999allevolution< 2.2.3-3evolution_2.2.3-3_all.deb
Debian13allevolution< 2.2.3-3evolution_2.2.3-3_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	evolution	< 2.2.3-3	evolution_2.2.3-3_all.deb
Debian	11	all	evolution	< 2.2.3-3	evolution_2.2.3-3_all.deb
Debian	10	all	evolution	< 2.2.3-3	evolution_2.2.3-3_all.deb
Debian	999	all	evolution	< 2.2.3-3	evolution_2.2.3-3_all.deb
Debian	13	all	evolution	< 2.2.3-3	evolution_2.2.3-3_all.deb