CVE-2008-1108

HIGH 7.6CVE-2008-1108 · Published 04/06/2008 · updated 16/06/2026

In short

CVE-2008-1108 is a HIGH (CVSS 7.6) vulnerability affecting evolution (gnome).
Chance of exploitation in the next 30 days (EPSS): 5.7%, higher than 93.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
evolution gnome	`= 2.2.1`	No fix yet

Description

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.

References

lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html
secunia.com/advisories/30298 · Vendor Advisory
secunia.com/advisories/30527
secunia.com/advisories/30536
secunia.com/advisories/30564
secunia.com/advisories/30571
secunia.com/advisories/30702
secunia.com/advisories/30716
secunia.com/secunia_research/2008-22/advisory
security.gentoo.org/glsa/glsa-200806-06.xml
mandriva.com/security/advisories
redhat.com/support/errata/RHSA-2008-0514.html
redhat.com/support/errata/RHSA-2008-0515.html
redhat.com/support/errata/RHSA-2008-0516.html
redhat.com/support/errata/RHSA-2008-0517.html

More vulnerabilities in evolution

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free