USN-166-1: Evolution vulnerabilities

Ulf Harnhammar disovered several format string vulnerabilities in Evolution. By tricking an user into viewing a specially crafted vCard attached to an email, specially crafted contact data from an LDAP server, specially crafted task lists from remote servers, or saving Calendar entries with this...

evolution -- remote format string vulnerabilities

A SITIC Vulnerability Advisory reports: Evolution suffers from several format string bugs when handling data from remote sources. These bugs lead to crashes or the execution of arbitrary assembly language code. The first format string bug occurs when viewing the full vCard data attached to an...

[Full-disclosure] Evolution multiple remote format string bugs

SITIC Vulnerability Advisory Advisory Name: Evolution multiple remote format string bugs Advisory Reference: SA05-001 Date of initial release: 2005-08-10 Product: Evolution 1.5, 2.0, 2.1, 2.2, 2.3 Platform: Linux, BSD systems, Unix Effect: Remote code execution Vulnerability Identifier: Not...

Multiple Evultion e-mail agent and groupware client format string vulnerabilities

Format string bugs on vCard format parsing, LDAP server reply parsing, remote server tasks displaying...

FreeBSD : mozilla -- vCard stack buffer overflow (da690355-1159-11d9-bc4a-000c41e2cdad)

Georgi Guninski discovered a stack-based buffer overflow which may be triggered when viewing email messages with vCard attachments. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyrigh...

CVE-2005-1801

The vCard viewer in Nokia 9500 allows attackers to cause a denial of service crash via a vCard with a long Name field, which causes the crash when the user views it...

CVE-2005-1801

The CVE-2005-1801 entry concerns the Nokia 9500 vCard viewer. The vulnerability lies in the vCard viewer component, where processing a vCard with an excessively long Name field can cause the viewer to crash, resulting in a denial of service. The available documents do not provide concrete exploit...

CVE-2005-1801: Undefined Security Weakness

The vCard viewer in Nokia 9500 allows attackers to cause a denial of service crash via a vCard with a long Name field, which causes the crash when the user views it...

CVE-2005-1801

The vCard viewer in Nokia 9500 allows attackers to cause a denial of service crash via a vCard with a long Name field, which causes the crash when the user views it...

Nokia 9500 - vCard Viewer Remote Denial of Service

source: https://www.securityfocus.com/bid/13784/info Nokia 9500 handset vCard viewer is affected by a remote denial of service vulnerability. This issue presents itself when the device handles a malformed vCard and fails to perform boundary checks prior to copying user-supplied data into a finite...

Nokia 9500 - vCard Viewer Remote Denial of Service

Nokia 9500 - vCard Viewer Remote Denial of Service source: https://www.securityfocus.com/bid/13784/info Nokia 9500 handset vCard viewer is affected by a remote denial of service vulnerability. This issue presents itself when the device handles a malformed vCard and fails to perform boundary check...

CVE-2004-1794

The CVE-2004-1794 entry describes a Cross-site Scripting (XSS) vulnerability in the VCard4J Toolkit. The issue allows remote attackers to inject arbitrary web script or HTML via the NICKNAME tag in a vCard. According to the available data, this is a client-side input handling weakness in VCard4J ...

CVE-2004-1828

CVE-2004-1828 affects Vcard 2.9 (and possibly other versions). The flaw is that uninstall.php does not require authorization, enabling remote attackers to trigger uninstall and delete database tables via a direct request. The NVD entry lists a base score of 5.0 (Medium) with network access, low a...

CVE-2004-1828

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php...

CVE-2004-1828: Undefined Security Weakness

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php...

CVE-2004-0903

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing...

CVE-2004-1828

Vcard 2.9 and possibly other versions does not require authorization to run uninstall.php, which could allow remote attackers to uninstall Vcard and delete database tables via a direct request to uninstall.php...

CVE-2004-0903

CVE-2004-0903 describes a stack-based buffer overflow in the writeGroup function of nsVCardObj.cpp, affecting Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8. An attacker could remotely execute arbitrary code by processing malformed VCard attachments d...

CVE-2004-0903

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing...

CVE-2004-0903: Undefined Security Weakness

Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing...