Unscored severity · published Aug 12, 2005
CVE-2005-2550
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar…
–
CVSS
4.4%
EPSS
No
On KEV
Description
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EV
Evolution · Gnome
1.4; 1.5; 2.0; 2.1; 2.2; 2.3.1; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2550
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2550
marc.info
http://marc.info/?l=full-disclosure&m=112368237712032&w=2
secunia.com
http://secunia.com/advisories/16394
secunia.com
http://secunia.com/advisories/19380
www.debian.org
http://www.debian.org/security/2006/dsa-1016
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2005:141
www.novell.com
http://www.novell.com/linux/security/advisories/2005_54_evolution.html
More from Evolution
9.8
CVE-2016-10727
camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client…
9.8
CVE-2018-12422
addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that…
9.8
CVE-2005-0102
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which…
7.8
CVE-2009-3721
Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF
7.5
CVE-2013-4166
The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG…