CVE-2008-1109

EPSS 4.2%

Published: 6/4/2008Modified: 4/28/2026

Also known as:DEBIAN-CVE-2008-1109

Description

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).

Affected packages (1)

Debian/evolutionfrom 0, < 2.22.2-1.1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-1109