Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown

CVE-2011-3201

Disclosure Date: March 08, 2013 (last updated October 05, 2023)
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
0
0
Attacker Value
Unknown

CVE-2009-1631

Disclosure Date: May 14, 2009 (last updated October 04, 2023)
The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.
0
0
Attacker Value
Unknown

CVE-2003-0129

Disclosure Date: March 24, 2003 (last updated February 22, 2025)
Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consumption) via a mail message that is uuencoded multiple times.
0
0
Attacker Value
Unknown

CVE-2003-0130

Disclosure Date: March 24, 2003 (last updated February 22, 2025)
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.
0
0
Attacker Value
Unknown

CVE-2003-0128

Disclosure Date: March 24, 2003 (last updated February 22, 2025)
The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malicious uuencoded (UUE) header, possibly triggering a heap-based buffer overflow.
0
0