Multiple vulnerabilities in Evolution may allow for user-assisted execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/evolution | * | < 2.12.3-r2 | >= 2.12.3-r2 |
Evolution is the mail client of the GNOME desktop environment.
Alin Rad Pop (Secunia Research) reported two vulnerabilities in Evolution:
A remote attacker could entice a user to open a specially crafted iCalendar attachment, resulting in the execution of arbitrary code with the privileges of the user running Evolution.
There is no known workaround at this time.
All Evolution users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/evolution-2.12.3-r2"
A format string error has been discovered in Evolution, possibly resulting in the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/evolution | * | < 2.12.3-r1 | >= 2.12.3-r1 |
Evolution is a GNOME groupware application.
Ulf Harnhammar from Secunia Research discovered a format string error in the emf_multipart_encrypted() function in the file mail/em-format.c when reading certain data (e.g. the "Version:" field) from an encrypted e-mail.
A remote attacker could entice a user to open a specially crafted encrypted e-mail, potentially resulting in the execution of arbitrary code with the privileges of the user running Evolution.
There is no known workaround at this time.
All Evolution users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/evolution-2.12.3-r1"
A vulnerability has been discovered in Evolution allowing for the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/evolution | * | < 2.8.3-r2 | >= 2.8.3-r2 |
Evolution is the mail client of the GNOME desktop environment.
Ulf Harnhammar from Secunia Research has discovered a format string error in the write_html() function in the file calendar/gui/e-cal-component-memo-preview.c.
A remote attacker could entice a user to open a specially crafted shared memo, possibly resulting in the execution of arbitrary code with the privileges of the user running Evolution.
There is no known workaround at this time.
All Evolution users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/evolution-2.8.3-r2"
Evolution is vulnerable to format string vulnerabilities which may result in remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/evolution | * | < 2.2.3-r3 | >= 2.2.3-r3 |
Evolution is a GNOME groupware application.
Ulf Harnhammar discovered that Evolution is vulnerable to format string bugs when viewing attached vCards and when displaying contact information from remote LDAP servers or task list data from remote servers (CAN-2005-2549). He also discovered that Evolution fails to handle special calendar entries if the user switches to the Calendars tab (CAN-2005-2550).
An attacker could attach specially crafted vCards to emails or setup malicious LDAP servers or calendar entries which would trigger the format string vulnerabilities when viewed or accessed from Evolution. This could potentially result in the execution of arbitrary code with the rights of the user running Evolution.
There is no known workaround at this time.
All Evolution users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/evolution-2.2.3-r3"
An overflow in the camel-lock-helper application can be exploited by an attacker to execute arbitrary code with elevated privileges.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| mail-client/evolution | * | <= 2.0.2 | >= 2.0.2-r1 |
Evolution is a GNOME groupware application similar to Microsoft Outlook.
Max Vozeler discovered an integer overflow in the camel-lock-helper application, which is installed as setgid mail by default.
A local attacker could exploit this vulnerability to execute malicious code with the privileges of the 'mail' group. A remote attacker could also setup a malicious POP server to execute arbitrary code when an Evolution user connects to it.
There is no known workaround at this time.
All Evolution users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=mail-client/evolution-2.0.2-r1"