28 results · Feed
-
Medium 6.3
Evolution: evolution: javascript execution via spoofed vcard control bypasses mail script-markup restriction
A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. When a victim clicks on this control, Evolution's trusted JavaScript handler incorrectly assigns an a…
-
Unscored —
GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted k…
-
Unscored —
An issue was discovered in GNOME Evolution before 3.35.91. By using the proprietary (non-RFC6068) "mailto?attach=..." p…
-
Unscored —
The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data…
-
Unscored —
GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially cr…
-
Unscored —
The S/MIME specification allows a Cipher Block Chaining (CBC) malleability-gadget attack that can indirectly lead to pl…
-
Unscored —
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter…
-
Unscored —
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and …
-
Unscored —
Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arb…
-
Unscored —
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a lo…
-
Unscored —
Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier…
-
Unscored —
Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execut…
-
Unscored —
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shar…
-
Unscored —CVE-2007-1266 Public exploit
Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolutio…
-
Unscored —
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote a…
-
Unscored —
GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) v…
-
Unscored —
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause …
-
Unscored —
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (cras…
-
Unscored —
Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of ser…
-
Unscored —
Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an em…
-
Unscored —
Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, …
-
Unscored —
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 server…
-
Unscored —
The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL c…
-
Unscored —
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly exec…
-
Unscored —
GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certai…
-
Unscored —
Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consump…
-
Unscored —
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly esc…
-
Unscored —
The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attac…