CVE-2008-1109

CVE-2008-1109 affects Evolution (GNOME mail/calendar client), with a heap-based buffer overflow in parsing iCalendar attachments. If a user opens a crafted meeting reply containing an overly long "+DESCRIPTION" property, arbitrary code could be executed under the user’s privileges. The issue is t...

CVE-2008-1109

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

evolution28 security update

CentOS Errata and Security Advisory CESA-2008:0515 Updated evolution28 packages that address two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the...

evolution security update

CentOS Errata and Security Advisory CESA-2008:0516 Updated evolution packages that address a buffer overflow vulnerability are now available for Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Respons...

evolution: iCalendar buffer overflow via large timezone specification

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment...

Important: Red Hat Security Advisory: evolution28 security update

Updated evolution28 packages that address two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring,...

evolution: iCalendar buffer overflow via large description parameter

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

evolution: iCalendar buffer overflow via large timezone specification

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment...

Critical: Red Hat Security Advisory: evolution security update

Updated evolution packages that address a buffer overflow vulnerability are now available for Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail...

Critical: Red Hat Security Advisory: evolution security update

Updated evolution packages that address a buffer overflow vulnerability are now available for Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the integrated collection of...

Important: Red Hat Security Advisory: evolution security update

Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring, contact...

evolution: iCalendar buffer overflow via large timezone specification

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment...

evolution: iCalendar buffer overflow via large description parameter

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

RHEL 5 : evolution (RHSA-2008:0514)

Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring, contact...

evolution security update

2.0.2-35.0.4.el4.2 - Add patch for RH bug 448725 buffer overflow vulnerability...

CVE-2008-1108: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment...

evolution security update

2.0.2-35.0.4.el4.2 - Add patch for RH bug 448724 buffer overflow vulnerability...

CVE-2008-1109: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

CentOS 4 / 5 : evolution (CESA-2008:0177)

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...

openSUSE 10 Security Update : evolution (evolution-5087)

This update of evolution fixes multiple format-string vulnerabilities that can occur while processing encrypted messages. CVE-2008-0072 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...