7.5
CVSSv2

CVE-2009-0587

Published: 14/03/2009 Updated: 13/02/2023
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple integer overflows in Evolution Data Server (aka evolution-data-server) prior to 2.24.5 allow context-dependent malicious users to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.

Vulnerable Product Search on Vulmon Subscribe to Product

go-evolution evolution-data-server

Vendor Advisories

It was discovered that the Base64 encoding functions in evolution-data-server did not properly handle large strings If a user were tricked into opening a specially crafted image file, or tricked into connecting to a malicious server, an attacker could possibly execute arbitrary code with user privileges ...
Several vulnerabilities have been found in evolution-data-server, the database backend server for the evolution groupware suite The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0587 It was discovered that evolution-data-server is prone to integer overflows triggered by large base64 strings CVE-2009-054 ...
Synopsis Moderate: evolution-data-server security update Type/Severity Security Advisory: Moderate Topic Updated evolution-data-server and evolution28-evolution-data-serverpackages that fix multiple security issues are now available for Red HatEnterprise Linux 4 and 5This update has been rated as having mo ...
Synopsis Moderate: evolution security update Type/Severity Security Advisory: Moderate Topic Updated evolution packages that fixes multiple security issues are nowavailable for Red Hat Enterprise Linux 3This update has been rated as having moderate security impact by the RedHat Security Response Team ...
Synopsis Moderate: evolution and evolution-data-server security update Type/Severity Security Advisory: Moderate Topic Updated evolution and evolution-data-server packages that fixes multiplesecurity issues are now available for Red Hat Enterprise Linux 4This update has been rated as having moderate securi ...