4.3

CVE-2011-3201

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Solaris Version11.2
Gnome ≫ Evolution Version <= 3.0.3
Gnome ≫ Evolution Version1.0.8
Gnome ≫ Evolution Version1.2
Gnome ≫ Evolution Version1.2.1
Gnome ≫ Evolution Version1.2.2
Gnome ≫ Evolution Version1.2.3
Gnome ≫ Evolution Version1.2.4
Gnome ≫ Evolution Version1.4
Gnome ≫ Evolution Version1.4.3
Gnome ≫ Evolution Version1.4.4
Gnome ≫ Evolution Version1.4.5
Gnome ≫ Evolution Version1.4.6
Gnome ≫ Evolution Version1.5
Gnome ≫ Evolution Version1.11
Gnome ≫ Evolution Version2.0
Gnome ≫ Evolution Version2.0.0
Gnome ≫ Evolution Version2.0.1
Gnome ≫ Evolution Version2.0.2
Gnome ≫ Evolution Version2.1
Gnome ≫ Evolution Version2.2
Gnome ≫ Evolution Version2.2.1
Gnome ≫ Evolution Version2.3.1
Gnome ≫ Evolution Version2.3.2
Gnome ≫ Evolution Version2.3.3
Gnome ≫ Evolution Version2.3.4
Gnome ≫ Evolution Version2.3.5
Gnome ≫ Evolution Version2.3.6
Gnome ≫ Evolution Version2.3.6.1
Gnome ≫ Evolution Version2.3.7
Gnome ≫ Evolution Version2.4
Gnome ≫ Evolution Version2.4.2.1
Gnome ≫ Evolution Version2.6
Gnome ≫ Evolution Version2.8.1
Gnome ≫ Evolution Version2.10.3
Gnome ≫ Evolution Version2.12
Gnome ≫ Evolution Version2.12.3
Gnome ≫ Evolution Version2.22.1
Gnome ≫ Evolution Version2.22.3
Gnome ≫ Evolution Version2.24
Gnome ≫ Evolution Version2.24.5
Gnome ≫ Evolution Version2.26.1
Gnome ≫ Evolution Version2.26.3
Gnome ≫ Evolution Version2.28.3.1
Gnome ≫ Evolution Version2.30.3
Gnome ≫ Evolution Version2.32.3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.67% 0.838
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2013-0516.html
Third Party Advisory
https://bugzilla.gnome.org/show_bug.cgi?id=657374
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=733504
Patch
Vendor Advisory
Issue Tracking
https://exchange.xforce.ibmcloud.com/vulnerabilities/82450
https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56
Patch
Vendor Advisory
https://git.gnome.org/browse/evolution/commit/?id=588c410718068388f8ce0004a71c104a4c89cce3
Patch
Vendor Advisory