CVE-2008-1109

EPSS 5.75%
Veröffentlicht 04.06.2008 20:32:00
Zuletzt bearbeitet 16.06.2026 22:51:01
Quelle PSIRT-CNA@flexerasoftware.com
CVE-Watchlists
Login
Unerledigt
Login

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 24

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gnome ≫ Evolution Version2.22.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.75%	0.921

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.html

http://secunia.com/advisories/30298

Vendor Advisory

http://secunia.com/advisories/30527

http://secunia.com/advisories/30564

http://secunia.com/advisories/30571

http://secunia.com/advisories/30702

http://secunia.com/advisories/30716

http://security.gentoo.org/glsa/glsa-200806-06.xml

http://www.mandriva.com/security/advisories?name=MDVSA-2008:111

http://www.redhat.com/support/errata/RHSA-2008-0514.html

http://www.redhat.com/support/errata/RHSA-2008-0515.html

http://www.securityfocus.com/bid/29527

http://www.ubuntu.com/usn/usn-615-1

http://www.vupen.com/english/advisories/2008/1732/references

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.html

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.html

https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.html

http://secunia.com/secunia_research/2008-23/advisory/

Vendor Advisory

http://www.securitytracker.com/id?1020170

https://exchange.xforce.ibmcloud.com/vulnerabilities/42826

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10337

https://nvd.nist.gov/vuln/detail/CVE-2008-1109

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-1109

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-1109

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-1109