Login Request a demo
Unscored severity · published Aug 12, 2005
CVE-2005-2549
Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1)…
–
CVSS
4.4%
EPSS
No
On KEV
Description
Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
Evolution · Gnome
1.5; 2.0; 2.1; 2.2; 2.3.1; 2.3.2; +4 more · source: NVD
Affected product
EV
Evolution
Gnome
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2549
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2549
marc.info
http://marc.info/?l=full-disclosure&m=112368237712032&w=2
secunia.com
http://secunia.com/advisories/16394
secunia.com
http://secunia.com/advisories/19380
www.debian.org
http://www.debian.org/security/2006/dsa-1016
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2005:141
www.novell.com
http://www.novell.com/linux/security/advisories/2005_54_evolution.html
More from Evolution
9.8
CVE-2016-10727
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client…
9.8
CVE-2018-12422
addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that…
9.8
CVE-2005-0102
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which…
7.8
CVE-2009-3721
Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF
7.5
CVE-2013-4166
The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG…