Published: 04/06/2008 Updated: 29/09/2017

CVSS v2 Base Score: 7.6 | Impact Score: 10 | Exploitability Score: 4.9

VMScore: 676

Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote malicious users to execute arbitrary code via a long timezone string in an iCalendar attachment.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome evolution 2.2.1

Alin Rad Pop of Secunia Research discovered that Evolution did not properly validate timezone data when processing iCalendar attachments If a user disabled the ITip Formatter plugin and viewed a crafted iCalendar attachment, an attacker could cause a denial of service or possibly execute code with user privileges Note that the ITip Formatter plug ...

Debian Bug report logs - #484639 Two buffer overflows in evolution Package: evolution; Maintainer for evolution is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for evolution is src:evolution (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Thu, ...

CWE-119 http://secunia.com/secunia_research/2008-22/advisory/http://secunia.com/advisories/30298 http://www.redhat.com/support/errata/RHSA-2008-0516.html http://www.mandriva.com/security/advisories?name=MDVSA-2008:111 http://www.redhat.com/support/errata/RHSA-2008-0517.html http://secunia.com/advisories/30527 http://secunia.com/advisories/30536 http://secunia.com/advisories/30702 http://secunia.com/advisories/30716 http://security.gentoo.org/glsa/glsa-200806-06.xml http://www.redhat.com/support/errata/RHSA-2008-0514.html http://www.ubuntu.com/usn/usn-615-1 http://www.redhat.com/support/errata/RHSA-2008-0515.html http://secunia.com/advisories/30571 http://www.securityfocus.com/bid/29527 http://www.securitytracker.com/id?1020169 http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html http://secunia.com/advisories/30564 http://www.vupen.com/english/advisories/2008/1732/references https://exchange.xforce.ibmcloud.com/vulnerabilities/42824 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10471 https://nvd.nist.gov https://usn.ubuntu.com/615-1/

CVE-2008-1108

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect