Lucene search
RedHatRHSA-2007:0158HistoryMay 03, 2007 - 12:00 a.m.
(RHSA-2007:0158) Moderate: evolution security update
2007-05-0300:00:00
access.redhat.com
9
EPSS
0.205
Percentile
96.4%
Evolution is the GNOME collection of personal information management (PIM)
tools.
A format string bug was found in the way Evolution parsed the category field
in a memo. If a user tried to save and then view a carefully crafted memo,
arbitrary code may be executed as the user running Evolution. (CVE-2007-1002)
This flaw did not affect the versions of Evolution shipped with Red Hat
Enterprise Linux 2.1, 3, or 4.
All users of Evolution should upgrade to these updated packages, which
contain a backported patch which resolves this issue.
Red Hat would like to thank Ulf Harnhammar of Secunia Research for
reporting this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 5 | x86_64 | evolution | < 2.8.0-33.0.1.el5 | evolution-2.8.0-33.0.1.el5.x86_64.rpm |
| RedHat | 5 | src | evolution | < 2.8.0-33.0.1.el5 | evolution-2.8.0-33.0.1.el5.src.rpm |
| RedHat | 5 | i386 | evolution-devel | < 2.8.0-33.0.1.el5 | evolution-devel-2.8.0-33.0.1.el5.i386.rpm |
| RedHat | 5 | i386 | evolution | < 2.8.0-33.0.1.el5 | evolution-2.8.0-33.0.1.el5.i386.rpm |
| RedHat | 5 | x86_64 | evolution-devel | < 2.8.0-33.0.1.el5 | evolution-devel-2.8.0-33.0.1.el5.x86_64.rpm |
Related
nessus
nessus
GLSA-200706-02 : Evolution: User-assisted execution of arbitrary code
2007-06-07 00:00:00
openSUSE 10 Security Update : evolution (evolution-3960)
2007-10-17 00:00:00
Ubuntu 6.06 LTS / 6.10 : evolution vulnerability (USN-442-1)
2007-11-10 00:00:00
securityvulns
securityvulns
Gnome Evolution calendar format string vulnerability
2007-03-22 00:00:00
debiancve
debiancve
CVE-2007-1002
2007-03-21 22:19:00
prion
prion
Format string
2007-03-21 22:19:00
openvas
openvas
Gentoo Security Advisory GLSA 200706-02 (evolution)
2008-09-24 00:00:00
Ubuntu Update for evolution vulnerability USN-442-1
2009-03-23 00:00:00
Mandriva Update for evolution MDKSA-2007:070 (evolution)
2009-04-09 00:00:00
cve
cve
CVE-2007-1002
2007-03-21 22:19:00
ubuntu
ubuntu
Evolution vulnerability
2007-03-26 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: evolution-2.8.3-2.fc6
2007-04-04 20:40:31
[SECURITY] Fedora Core 5 Update: evolution-2.6.3-2.fc5
2007-04-04 20:42:00
gentoo
gentoo
Evolution: User-assisted execution of arbitrary code
2007-06-06 00:00:00
nvd
nvd
CVE-2007-1002
2007-03-21 22:19:00
cvelist
cvelist
CVE-2007-1002
2007-03-21 22:00:00
ubuntucve
ubuntucve
CVE-2007-1002
2007-03-21 00:00:00
osv
osv
evolution
2007-06-29 00:00:00
debian
debian
[SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution
2007-06-29 15:06:48