CVE-2006-0528
published 2006-02-02CVE-2006-0528: The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client…
PriorityP423medium5CVSS 2.0
AVNACLAuNCNINAP
EXPLOIT
EPSS
10.76%
95.3th percentile
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | evolution | < evolution 2.2.3-4 (bookworm) | evolution 2.2.3-4 (bookworm) |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | >= 0 < 2.2.3-4 | 2.2.3-4 |
| gnome | evolution | >= 0 < 2.2.3-4 | 2.2.3-4 |
| gnome | evolution | >= 0 < 2.2.3-4 | 2.2.3-4 |
| gnome | evolution | >= 0 < 2.2.3-4 | 2.2.3-4 |
CVSS provenance
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
osv5.0MEDIUM
vendor_debian5.0LOW
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
cairo/Evolution library vulnerability
vendor_ubuntu·2006-03-23
CVE-2006-0528 cairo/Evolution library vulnerability
Title: cairo/Evolution library vulnerability
Summary: cairo/Evolution library vulnerability
When rendering glyphs, the cairo graphics rendering library did not
check the maximum length of character strings. A request to display
an excessively long string with cairo caused a program crash due to an
X library error.
Mike Davis discovered that this could be turned into a Denial of
Service attack in Evolution. An email with an attachment with very
long lines caused Evolution to crash repeatedly until that email was
manually removed from the mail folder.
This only affects Ubuntu 5.10. Previous Ubuntu releases did not use
libcairo for text rendering.
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2006-0528: evolution - The cairo library (libcairo), as used in GNOME Evolution and possibly other prod...
vendor_debian·2006·CVSS 5.0
CVE-2006-0528 [MEDIUM] CVE-2006-0528: evolution - The cairo library (libcairo), as used in GNOME Evolution and possibly other prod...
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
Scope: local
bookworm: resolved (fixed in 2.2.3-4)
bullseye: resolved (fixed in 2.2.3-4)
forky: resolved (fixed in 2.2.3-4)
sid: resolved (fixed in 2.2.3-4)
trixie: resolved (fixed in 2.2.3-4)
GHSA
GHSA-4rxr-6q7p-q23g: The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent
ghsa_unreviewed·2022-05-01
CVE-2006-0528 [MEDIUM] GHSA-4rxr-6q7p-q23g: The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
OSV
CVE-2006-0528: The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent
osv·2006-02-02·CVSS 5.0
CVE-2006-0528 [MEDIUM] CVE-2006-0528: The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
No detection rules found.
Exploit-DB
PA168 Chipset IP Phones - Weak Session Management
exploitdb·2007-01-24
CVE-2007-0528 PA168 Chipset IP Phones - Weak Session Management
PA168 Chipset IP Phones - Weak Session Management
---
#!/bin/bash
# PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability
# Author: Adrian Pastor [adrian.pastor-AT-procheckup.com] from ProCheckUp
# This advisory has been published following consultation with UK NISCC [http://www.niscc.gov.uk/]
# Date Found: 3rd November 2006
# Date Public: 22nd January 2007
# Vulnerable:
# Phones confirmed to be vulnerable:
# - ATCOM AT-320ED IP Phone running SIP firmware version V1.42 and 1.54
# - SOYO G668 Ethernet IP Phone running SIP firmware version v1.42
# The following vendors/models also use the same PA168 chipset/firmware
# and are therefore most likely to be vulnerable to the same issue:
# - AriaVoice
# - AT-323 from ATcom
# - JR168_
Exploit-DB
GNOME Evolution 2.2.3/2.3.x - Inline XML File Attachment Buffer Overflow
exploitdb·2006-01-28
CVE-2006-0528 GNOME Evolution 2.2.3/2.3.x - Inline XML File Attachment Buffer Overflow
GNOME Evolution 2.2.3/2.3.x - Inline XML File Attachment Buffer Overflow
---
source: https://www.securityfocus.com/bid/16408/info
GNOME Evolution email client is prone to a denial-of-service vulnerability when processing messages containing inline XML file attachments with excessively long strings.
perl -e 'printf "A"x40000' > evolution-dos-poc.xml
No writeups or analysis indexed.
http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0925.htmlhttp://secunia.com/advisories/19504http://securityreason.com/securityalert/610http://www.mandriva.com/security/advisories?name=MDKSA-2006:057http://www.novell.com/linux/security/advisories/2006_07_sr.htmlhttp://www.securityfocus.com/bid/16408https://usn.ubuntu.com/265-1/http://archives.neohapsis.com/archives/fulldisclosure/2006-01/0925.htmlhttp://secunia.com/advisories/19504http://securityreason.com/securityalert/610http://www.mandriva.com/security/advisories?name=MDKSA-2006:057http://www.novell.com/linux/security/advisories/2006_07_sr.htmlhttp://www.securityfocus.com/bid/16408https://usn.ubuntu.com/265-1/
2006-02-02
Published