CVE-2011-3201

MEDIUM 4.3CVE-2011-3201 · Published 08/03/2013 · updated 16/06/2026

In short

CVE-2011-3201 is a MEDIUM (CVSS 4.3) vulnerability affecting evolution (gnome).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 85.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
evolution gnome	`= 1.0.8= 1.11= 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.4= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.5= 2.0= 2.0.0= 2.0.1= 2.0.2= 2.1= 2.10.3= 2.12= 2.12.3= 2.2= 2.2.1= 2.22.1= 2.22.3= 2.24= 2.24.5= 2.26.1= 2.26.3= 2.28.3.1= 2.3.1= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.3.6= 2.3.6.1= 2.3.7= 2.30.3= 2.32.3= 2.4= 2.4.2.1= 2.6= 2.8.1≤ 3.0.3`	No fix yet

Description

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.

References

rhn.redhat.com/errata/RHSA-2013-0516.html · Third Party Advisory
oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html · Third Party Advisory
bugzilla.gnome.org/show_bug.cgi · Issue Tracking
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
exchange.xforce.ibmcloud.com/vulnerabilities/82450
git.gnome.org/browse/evolution/commit · Patch
git.gnome.org/browse/evolution/commit · Patch

More vulnerabilities in evolution

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

evolution

gnome

= 1.0.8= 1.11= 1.2= 1.2.1= 1.2.2= 1.2.3= 1.2.4= 1.4= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.5= 2.0= 2.0.0= 2.0.1= 2.0.2= 2.1= 2.10.3= 2.12= 2.12.3= 2.2= 2.2.1= 2.22.1= 2.22.3= 2.24= 2.24.5= 2.26.1= 2.26.3= 2.28.3.1= 2.3.1= 2.3.2= 2.3.3= 2.3.4= 2.3.5= 2.3.6= 2.3.6.1= 2.3.7= 2.30.3= 2.32.3= 2.4= 2.4.2.1= 2.6= 2.8.1≤ 3.0.3

No fix yet

More vulnerabilities in evolution

See all →