CVE-2008-1109

2008-06-0400:00:00

ubuntu.com

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.165

Percentile

96.0%

JSON

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote
attackers to execute arbitrary code via a long DESCRIPTION property in an
iCalendar attachment, which is not properly handled during a reply in the
calendar view (aka the Calendars window).

Notes

Author	Note
jdstrand	redhat has patches for 2.12, 1,4,5, 2.0.2, 2.8

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchevolution< 2.6.1-0ubuntu7.4UNKNOWN
ubuntu7.04noarchevolution< 2.10.1-0ubuntu2.4UNKNOWN
ubuntu7.10noarchevolution< 2.12.1-0ubuntu1.3UNKNOWN
ubuntu8.04noarchevolution< 2.22.2-0ubuntu1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	evolution	< 2.6.1-0ubuntu7.4	UNKNOWN
ubuntu	7.04	noarch	evolution	< 2.10.1-0ubuntu2.4	UNKNOWN
ubuntu	7.10	noarch	evolution	< 2.12.1-0ubuntu1.3	UNKNOWN
ubuntu	8.04	noarch	evolution	< 2.22.2-0ubuntu1.2	UNKNOWN