evolution: iCalendar buffer overflow via large timezone specification

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment...

Important: Red Hat Security Advisory: evolution28 security update

Updated evolution28 packages that address two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring,...

evolution: iCalendar buffer overflow via large description parameter

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

evolution: iCalendar buffer overflow via large timezone specification

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment...

Critical: Red Hat Security Advisory: evolution security update

Updated evolution packages that address a buffer overflow vulnerability are now available for Red Hat Enterprise Linux 4.5 Extended Update Support. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail...

Critical: Red Hat Security Advisory: evolution security update

Updated evolution packages that address a buffer overflow vulnerability are now available for Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the integrated collection of...

evolution: iCalendar buffer overflow via large timezone specification

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment...

evolution: iCalendar buffer overflow via large description parameter

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

Important: Red Hat Security Advisory: evolution security update

Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring, contact...

CVE-2008-1109: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view aka the Calendars window...

CVE-2008-1108: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment...

evolution security update

2.0.2-35.0.4.el4.2 - Add patch for RH bug 448724 buffer overflow vulnerability...

evolution security update

2.0.2-35.0.4.el4.2 - Add patch for RH bug 448725 buffer overflow vulnerability...

RHEL 5 : evolution (RHSA-2008:0514)

Updated evolution packages that fix two buffer overflow vulnerabilities are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Evolution is the integrated collection of e-mail, calendaring, contact...

openSUSE 10 Security Update : evolution (evolution-5087)

This update of evolution fixes multiple format-string vulnerabilities that can occur while processing encrypted messages. CVE-2008-0072 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CentOS 4 / 5 : evolution (CESA-2008:0177)

Updated evolution packages that fix a format string bug are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Evolution is the GNOME collection of personal information management PIM tools. A...

SuSE 10 Security Update : evolution (ZYPP Patch Number 5086)

This update of evolution fixes multiple format-string vulnerabilities that can occur while processing encrypted messages. CVE-2008-0072 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc';...

Debian Security Advisory DSA 1512-1 (evolution)

The remote host is missing an update to evolution announced via advisory DSA 1512-1. OpenVAS Vulnerability Test $Id: deb15121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1512-1 evolution Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1512-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GLSA-200803-12 : Evolution: Format string vulnerability

The remote host is affected by the vulnerability described in GLSA-200803-12 Evolution: Format string vulnerability Ulf Harnhammar from Secunia Research discovered a format string error in the emfmultipartencrypted function in the file mail/em-format.c when reading certain data e.g. the 'Version:...