4.3

CVE-2011-3201

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Solaris Version11.2
Gnome ≫ Evolution Version <= 3.0.3
Gnome ≫ Evolution Version1.0.8
Gnome ≫ Evolution Version1.2
Gnome ≫ Evolution Version1.2.1
Gnome ≫ Evolution Version1.2.2
Gnome ≫ Evolution Version1.2.3
Gnome ≫ Evolution Version1.2.4
Gnome ≫ Evolution Version1.4
Gnome ≫ Evolution Version1.4.3
Gnome ≫ Evolution Version1.4.4
Gnome ≫ Evolution Version1.4.5
Gnome ≫ Evolution Version1.4.6
Gnome ≫ Evolution Version1.5
Gnome ≫ Evolution Version1.11
Gnome ≫ Evolution Version2.0
Gnome ≫ Evolution Version2.0.0
Gnome ≫ Evolution Version2.0.1
Gnome ≫ Evolution Version2.0.2
Gnome ≫ Evolution Version2.1
Gnome ≫ Evolution Version2.2
Gnome ≫ Evolution Version2.2.1
Gnome ≫ Evolution Version2.3.1
Gnome ≫ Evolution Version2.3.2
Gnome ≫ Evolution Version2.3.3
Gnome ≫ Evolution Version2.3.4
Gnome ≫ Evolution Version2.3.5
Gnome ≫ Evolution Version2.3.6
Gnome ≫ Evolution Version2.3.6.1
Gnome ≫ Evolution Version2.3.7
Gnome ≫ Evolution Version2.4
Gnome ≫ Evolution Version2.4.2.1
Gnome ≫ Evolution Version2.6
Gnome ≫ Evolution Version2.8.1
Gnome ≫ Evolution Version2.10.3
Gnome ≫ Evolution Version2.12
Gnome ≫ Evolution Version2.12.3
Gnome ≫ Evolution Version2.22.1
Gnome ≫ Evolution Version2.22.3
Gnome ≫ Evolution Version2.24
Gnome ≫ Evolution Version2.24.5
Gnome ≫ Evolution Version2.26.1
Gnome ≫ Evolution Version2.26.3
Gnome ≫ Evolution Version2.28.3.1
Gnome ≫ Evolution Version2.30.3
Gnome ≫ Evolution Version2.32.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.81% 0.732
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://bugzilla.redhat.com/show_bug.cgi?id=733504
Patch
Vendor Advisory
Issue Tracking