CVE-2005-2549

Evolution 1.5-2.3.6.1 - Format String Vulnerability via vCard LDAP or Task List Data

Title source: llm
STIX 2.1

Description

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2005_54_evolution.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14532
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-267.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19380
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1016
Vendor Advisory vendor-advisory x_refsource_fedora
http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:141
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16394
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9553
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/407789
Mailing List mailing-list x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=112368237712032&w=2
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/166-1/

Scores

EPSS 0.0293
EPSS Percentile 86.6%

Details

Status published
Products (10)
gnome/evolution 1.5
gnome/evolution 2.0
gnome/evolution 2.1
gnome/evolution 2.2
gnome/evolution 2.3.1
gnome/evolution 2.3.2
gnome/evolution 2.3.3
gnome/evolution 2.3.4
gnome/evolution 2.3.5
gnome/evolution 2.3.6.1
Published Aug 12, 2005
Tracked Since Feb 18, 2026