Mandrake Linux Security Advisory : gtkhtml (MDKSA-2003:046)

A vulnerability in GtkHTML was discovered by Alan Cox with the Evolution email client. GtkHTML is used to handle HTML messages in Evolution and certain malformed messages could cause Evolution to crash due to this bug. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

Mandrake Linux Security Advisory : evolution (MDKSA-2003:045)

Several vulnerabilities were discovered in the Evolution email client. These problems make it possible for a carefully constructed email message to crash the program, causing general system instability by starving resources. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive tex...

MDKSA-2004:020 - Updated gdk-pixbuf packages fix BMP-handling vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandrakelinux Security Update Advisory Package name: gdk-pixbuf Advisory ID: MDKSA-2004:020 Date: March 10th, 2004 Affected versions: Corporate Server 2.1 Problem Description: A vulnerability in gdk-pixbuf versions before 0.20 exists that could allow ...

Important: Red Hat Security Advisory: : Updated gdk-pixbuf packages fix denial of service vulnerability

Updated gdk-pixbuf packages that fix a denial of service vulnerability that could affect applications such as Evolution are now available. The gdk-pixbuf package contains an image loading library used with the GNOME GUI desktop environment. In Red Hat Linux 9 this library is used by applications,...

CVE-2003-0541: Undefined Security Weakness

gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service crash via a malformed message that causes a null pointer dereference...

CVE-2003-0296

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0296

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

DEBIAN-CVE-2003-0296

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0296

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

CVE-2003-0296

The CVE-2003-0296 entry concerns the IMAP Client for Evolution 1.2.4. The issue arises from handling of certain large literal size values, triggering integer signedness errors or integer overflow in parsing, which can lead to denial of service and potentially arbitrary code execution. Affected co...

CVE-2003-0296: Undefined Security Weakness

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors...

DEBIAN-CVE-2003-0133

GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service crash via certain malformed messages...

CVE-2003-0133

GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service crash via certain malformed messages...

CVE-2002-1471

The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack...

DEBIAN-CVE-2002-1471

The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack...

CVE-2002-1471

The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack...

CVE-2003-0133

GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service crash via certain malformed messages...

CVE-2003-0133: Undefined Security Weakness

GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service crash via certain malformed messages...

CVE-2003-0128

The tryuudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a malicious uuencoded UUE header, possibly triggering a heap-based buffer overflow...

DEBIAN-CVE-2003-0128

The tryuudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a malicious uuencoded UUE header, possibly triggering a heap-based buffer overflow...