In GNOME evolution-data-server prior to 3.35.91, a malicious server can crash the mail client with a NULL pointer dereference by sending an invalid (e.g., minimal) CAPABILITY line on a connection attempt. This is related to imapx_free_capability and imapx_connect_to_server.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
gnome evolution-data-server |
||
debian debian linux 9.0 |