CVE-2008-0072
- State
- Published
- Severity
- Not scored
- Published
- Mar 6, 2008
- Updated
- Aug 7, 2024
- Reserved
- Jan 3, 2008
Description
Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 29258third-party-advisory
- 29163third-party-advisory
- DSA-1512vendor-advisory
- RHSA-2008:0178vendor-advisory
- 29057third-party-advisory
- VU#512491third-party-advisory
- USN-583-1vendor-advisory
- SUSE-SA:2008:014vendor-advisory
- 20080528 rPSA-2008-0105-1 evolutionmailing-list
- oval:org.mitre.oval:def:10701vdb-entrysignature
- http://secunia.com/secunia_research/2008-8/advisory/
- 30491third-party-advisory
- 29210third-party-advisory
- 30437third-party-advisory
- FEDORA-2008-2290vendor-advisory
- ADV-2008-0768vdb-entry
- GLSA-200803-12vendor-advisory
- 29317third-party-advisory
- 29264third-party-advisory
- MDVSA-2008:063vendor-advisory
- 29244third-party-advisory
- RHSA-2008:0177vendor-advisory
- https://issues.rpath.com/browse/RPL-2310
- evolution-emfmultipart-format-string(41011)vdb-entry
- FEDORA-2008-2292vendor-advisory
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0105
- 28102vdb-entry
- 1019540vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.