CVE-2005-2550

Evolution 1.4-2.3.6.1 - Format String Vulnerability via Calendar Entries

Title source: llm
STIX 2.1

Description

Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.

References (13)

Core 13
Core References
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2005_54_evolution.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/14532
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-267.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19380
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-1016
Vendor Advisory vendor-advisory x_refsource_fedora
http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2005:141
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/16394
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10880
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/407789
Mailing List mailing-list x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=112368237712032&w=2
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/166-1/

Scores

EPSS 0.0516
EPSS Percentile 90.0%

Details

Status published
Products (11)
gnome/evolution 1.4
gnome/evolution 1.5
gnome/evolution 2.0
gnome/evolution 2.1
gnome/evolution 2.2
gnome/evolution 2.3.1
gnome/evolution 2.3.2
gnome/evolution 2.3.3
gnome/evolution 2.3.4
gnome/evolution 2.3.5
... and 1 more
Published Aug 12, 2005
Tracked Since Feb 18, 2026