CVE-2008-1108

EPSS 5.69%
Veröffentlicht 04.06.2008 20:32:00
Zuletzt bearbeitet 16.06.2026 22:51:00
Quelle PSIRT-CNA@flexerasoftware.com
CVE-Watchlists
Login
Unerledigt
Login

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 27

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gnome ≫ Evolution Version2.2.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.69%	0.92

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.6	4.9	10	AV:N/AC:H/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html

http://secunia.com/advisories/30298

Vendor Advisory

http://secunia.com/advisories/30527

http://secunia.com/advisories/30536

http://secunia.com/advisories/30564

http://secunia.com/advisories/30571

http://secunia.com/advisories/30702

http://secunia.com/advisories/30716

http://secunia.com/secunia_research/2008-22/advisory/

http://security.gentoo.org/glsa/glsa-200806-06.xml

http://www.mandriva.com/security/advisories?name=MDVSA-2008:111

http://www.redhat.com/support/errata/RHSA-2008-0514.html

http://www.redhat.com/support/errata/RHSA-2008-0515.html

http://www.redhat.com/support/errata/RHSA-2008-0516.html

http://www.redhat.com/support/errata/RHSA-2008-0517.html

http://www.securityfocus.com/bid/29527

http://www.securitytracker.com/id?1020169

http://www.ubuntu.com/usn/usn-615-1

http://www.vupen.com/english/advisories/2008/1732/references

https://exchange.xforce.ibmcloud.com/vulnerabilities/42824

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10471

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html

https://nvd.nist.gov/vuln/detail/CVE-2008-1108

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1108

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1108

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-1108