CVE-2006-2789
published 2006-06-02CVE-2006-2789: Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service…
PriorityP410low2.6CVSS 2.0
AVNACHAuNCNINAP
EPSS
2.08%
79.4th percentile
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | evolution | < evolution 2.4.0-1 (bookworm) | evolution 2.4.0-1 (bookworm) |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | >= 0 < 2.4.0-1 | 2.4.0-1 |
| gnome | evolution | >= 0 < 2.4.0-1 | 2.4.0-1 |
| gnome | evolution | >= 0 < 2.4.0-1 | 2.4.0-1 |
| gnome | evolution | >= 0 < 2.4.0-1 | 2.4.0-1 |
CVSS provenance
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:N/I:N/A:P
osv2.6LOW
vendor_debian2.6LOW
vendor_redhat2.6LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2006-2789: evolution - Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in a...
vendor_debian·2006·CVSS 2.6
CVE-2006-2789 [LOW] CVE-2006-2789: evolution - Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in a...
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used.
Scope: local
bookworm: resolved (fixed in 2.4.0-1)
bullseye: resolved (fixed in 2.4.0-1)
forky: resolved (fixed in 2.4.0-1)
sid: resolved (fixed in 2.4.0-1)
trixie: resolved (fixed in 2.4.0-1)
Red Hat
CVE-2006-2789: Evolution 2
vendor_redhat·CVSS 2.6
CVE-2006-2789 [LOW] CVE-2006-2789: Evolution 2
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used.
Statement: Not vulnerable. This issue does not affect the versions of Evolution as distributed with Red Hat Enterprise Linux.
GHSA
GHSA-8wv6-gwv3-gfpm: Evolution 2
ghsa_unreviewed·2022-05-01
CVE-2006-2789 [LOW] GHSA-8wv6-gwv3-gfpm: Evolution 2
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used.
OSV
CVE-2006-2789: Evolution 2
osv·2006-06-02·CVSS 2.6
CVE-2006-2789 [LOW] CVE-2006-2789: Evolution 2
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://bugzilla.gnome.org/show_bug.cgi?id=309453http://bugzilla.gnome.org/show_bug.cgi?id=311440http://www.mandriva.com/security/advisories?name=MDKSA-2006:094http://www.securityfocus.com/bid/18212http://bugzilla.gnome.org/show_bug.cgi?id=309453http://bugzilla.gnome.org/show_bug.cgi?id=311440http://www.mandriva.com/security/advisories?name=MDKSA-2006:094http://www.securityfocus.com/bid/18212
2006-06-02
Published