CVE-2008-0072

MEDIO 6.8CVE-2008-0072 · Published 06/03/2008 · updated 16/06/2026

In breve

CVE-2008-0072 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda evolution (gnome).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 6.0%, superiore al 93.3% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
evolution gnome	`≤ 2.12.3`	No fix yet

Description

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

References

lists.opensuse.org/opensuse-security-announce/2008-03/msg00003.html
secunia.com/advisories/29057 · Vendor Advisory
secunia.com/advisories/29163 · Vendor Advisory
secunia.com/advisories/29210 · Vendor Advisory
secunia.com/advisories/29244 · Vendor Advisory
secunia.com/advisories/29258 · Vendor Advisory
secunia.com/advisories/29264 · Vendor Advisory
secunia.com/advisories/29317 · Vendor Advisory
secunia.com/advisories/30437 · Vendor Advisory
secunia.com/advisories/30491 · Vendor Advisory
secunia.com/secunia_research/2008-8/advisory · Vendor Advisory
security.gentoo.org/glsa/glsa-200803-12.xml
wiki.rpath.com/wiki/Advisories:rPSA-2008-0105

Altre vulnerabilità di evolution

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

evolution

gnome

≤ 2.12.3

No fix yet

Altre vulnerabilità di evolution

Vedi tutto →