Published: 12/08/2005 Updated: 03/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Format string vulnerability in Evolution 1.4 up to and including 2.3.6.1 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome evolution 1.4
gnome evolution 2.3.3
gnome evolution 2.3.4
gnome evolution 2.1
gnome evolution 2.2
gnome evolution 2.3.1
gnome evolution 2.3.2
gnome evolution 1.5
gnome evolution 2.0
gnome evolution 2.3.5
gnome evolution 2.3.6.1

Synopsis Evolution security update Type/Severity Security Advisory: Important Topic Updated evolution packages that fix a format string issue are now availableThis update has been rated as having important security impact by the RedHat Security Response Team Description Evolution is the G ...

Debian Bug report logs - #322535 evolution: Multiple format string vulnerabilities in Evolution Package: evolution; Maintainer for evolution is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for evolution is src:evolution (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilo ...

Ulf Härnhammar discovered several format string vulnerabilities in Evolution, a free groupware suite, that could lead to crashes of the application or the execution of arbitrary code For the old stable distribution (woody) these problems have been fixed in version 105-1woody3 For the stable distribution (sarge) these problems have been fixed i ...

NVD-CWE-Other http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html http://secunia.com/advisories/16394 http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html http://www.mandriva.com/security/advisories?name=MDKSA-2005:141 http://www.redhat.com/support/errata/RHSA-2005-267.html http://www.novell.com/linux/security/advisories/2005_54_evolution.html http://www.securityfocus.com/archive/1/407789 http://www.securityfocus.com/bid/14532 http://www.debian.org/security/2006/dsa-1016 http://secunia.com/advisories/19380 http://marc.info/?l=full-disclosure&m=112368237712032&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10880 https://usn.ubuntu.com/166-1/https://access.redhat.com/errata/RHSA-2005:267 https://nvd.nist.gov https://www.debian.org/security/./dsa-1016

CVE-2005-2550

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect