CVE-2009-0587

HIGH 7.5CVE-2009-0587 · Published 14/03/2009 · updated 16/06/2026

In short

CVE-2009-0587 is a HIGH (CVSS 7.5) vulnerability affecting evolution-data-server (go-evolution).
Chance of exploitation in the next 30 days (EPSS): 3.3%, higher than 88.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
evolution-data-server go-evolution	`≤ 2.24.4`	No fix yet

Description

Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.

References

lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
ocert.org/patches/2008-015/camel-CVE-2009-0587.diff · Patch
ocert.org/patches/2008-015/evc-CVE-2009-0587.diff · Patch
openwall.com/lists/oss-security/2009/03/12/2 · Patch
osvdb.org/52702
osvdb.org/52703
secunia.com/advisories/34338
secunia.com/advisories/34339
secunia.com/advisories/34348
secunia.com/advisories/34351
secunia.com/advisories/35357
debian.org/security/2009/dsa-1813
mandriva.com/security/advisories
ocert.org/advisories/ocert-2008-015.html
redhat.com/support/errata/RHSA-2009-0354.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free