CVE-2005-0102 — Integer Overflow or Wraparound in Evolution

CWE-190 — Integer Overflow or Wraparound9 documents8 sources
Severity
9.8CRITICALNVD
EPSS
0.6%
top 30.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Gnome EvolutionDebian Linux
Timeline
PublishedJan 24
Latest updateMay 1

Description

Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶Debiangnome/evolution< 2.0.3-1.2+3
▶NVDgnome/evolution2.0.2

Also affects: Debian Linux 3.0

Patches

Patch: distro.conectiva.com.br ↗Patch: www.debian.org ↗Patch: www.redhat.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-ghp8-rg92-746w: Integer overflow in camel-lock-helper in Evolution 2↗2022-05-01
▶
CVEList
CVE-2005-0102: Integer overflow in camel-lock-helper in Evolution 2↗2005-01-29
▶
OSV
CVE-2005-0102: Integer overflow in camel-lock-helper in Evolution 2↗2005-01-24
▶

📋Vendor Advisories

3
Ubuntu
Evolution vulnerability↗2005-01-24
▶
Red Hat
security flaw↗2005-01-18
▶
Debian
CVE-2005-0102: evolution - Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows loca...↗2005
▶

💬Community

2
Bugzilla
CVE-2005-0102 security flaw↗2018-08-16
▶
Bugzilla
CAN-2005-0102 evolution integer overflow↗2005-02-10
▶
CVE-2005-0102 — Integer Overflow or Wraparound | cvebase