Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-3201
HistoryMar 08, 2013 - 12:00 a.m.

CVE-2011-3201

2013-03-0800:00:00
ubuntu.com
ubuntu.com
4

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.3%

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read
arbitrary files via the attachment parameter to a mailto: URL, which
attaches the file to the email.

Bugs

Notes

Author Note
jdstrand no upstream patch yet (2011-10-13). In discussion in RedHat bug. requires user to not notice the attachment

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.3%