CVE-2008-1109

EPSS 4.2%

發布日:2008/6/4修改日:2026/4/28

描述

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).

受影響套件(1)

Debian/evolutionfrom 0, < 2.22.2-1.1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-1109