Lucene search

K
ubuntucveUbuntu.comUB:CVE-2007-1002
HistoryMar 21, 2007 - 12:00 a.m.

CVE-2007-1002

2007-03-2100:00:00
ubuntu.com
ubuntu.com
9

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.205

Percentile

96.4%

Format string vulnerability in the write_html function in
calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo
2.8.2.1, and possibly earlier versions, allows user-assisted remote
attackers to execute arbitrary code via format specifiers in the categories
of a crafted shared memo.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchevolution< 2.6.1-0ubuntu7.1UNKNOWN
ubuntu6.10noarchevolution< 2.8.1-0ubuntu4.1UNKNOWN
ubuntu7.04noarchevolution< 2.10.1-0ubuntu2UNKNOWN

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.205

Percentile

96.4%