CVE-2003-0296

5 documents5 sources
Severity
7.5HIGH
EPSS
1.0%
top 23.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Ximian Evolution
Timeline
PublishedJun 16
Latest updateApr 29

Description

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶Debianevolution< 1.3.2+3
▶NVDximian/evolution1.2.4

🔴Vulnerability Details

3
GHSA
GHSA-xfh3-x4h8-v3cw: The IMAP Client for Evolution 1↗2022-04-29
▶
OSV
CVE-2003-0296: The IMAP Client for Evolution 1↗2003-06-16
▶
CVEList
CVE-2003-0296: The IMAP Client for Evolution 1↗2003-05-15
▶

📋Vendor Advisories

1
Debian
CVE-2003-0296: evolution - The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to caus...↗2003
▶
CVE-2003-0296 (HIGH CVSS 7.5) | The IMAP Client for Evolution 1.2.4 | cvebase.io