CVE-2008-1108
published 2008-06-04CVE-2008-1108: Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string…
high7.6CVSS 3.1
AVNACHAuNCCICAC
Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | evolution | < evolution 2.22.2-1.1 (bookworm) | evolution 2.22.2-1.1 (bookworm) |
| gnome | evolution | — | — |
| gnome | evolution | >= 0 < 2.22.2-1.1 | 2.22.2-1.1 |
| gnome | evolution | >= 0 < 2.22.2-1.1 | 2.22.2-1.1 |
| gnome | evolution | >= 0 < 2.22.2-1.1 | 2.22.2-1.1 |
| gnome | evolution | >= 0 < 2.22.2-1.1 | 2.22.2-1.1 |
CVSS provenance
nvd7.6HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
osv7.6HIGH