CVE-2008-1109

KRITISCH 9.3CVE-2008-1109 · Published 04/06/2008 · updated 16/06/2026

Kurz gesagt

CVE-2008-1109 ist eine Schwachstelle (KRITISCH (CVSS 9.3)) in evolution (gnome).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 5.7%, höher als bei 93.1% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
evolution gnome	`= 2.22.1`	No fix yet

Description

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).

References

lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html
secunia.com/advisories/30298 · Vendor Advisory
secunia.com/advisories/30527
secunia.com/advisories/30564
secunia.com/advisories/30571
secunia.com/advisories/30702
secunia.com/advisories/30716
secunia.com/secunia_research/2008-23/advisory · Vendor Advisory
security.gentoo.org/glsa/glsa-200806-06.xml
mandriva.com/security/advisories
redhat.com/support/errata/RHSA-2008-0514.html
redhat.com/support/errata/RHSA-2008-0515.html
securityfocus.com/bid/29527
securitytracker.com/id
ubuntu.com/usn/usn-615-1

Weitere Schwachstellen in evolution

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free