Vulnerabilities > Gnome > Evolution > 2.3.1

DATE CVE VULNERABILITY TITLE RISK
2006-02-02 CVE-2006-0528 Buffer Overflow vulnerability in GNOME Evolution Inline XML File Attachment
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
network
low complexity
gnome
5.0
2005-08-12 CVE-2005-2550 Format String vulnerability in GNOME Evolution
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
network
low complexity
gnome
7.5
2005-08-12 CVE-2005-2549 Format String vulnerability in GNOME Evolution
Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.
network
low complexity
gnome
7.5