CVE-2008-1108: Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string…

PriorityP340high7.6CVSS 2.0

AVNACHAuNCCICAC

EPSS

5.69%

92.1th percentile

Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	evolution	< evolution 2.22.2-1.1 (bookworm)	evolution 2.22.2-1.1 (bookworm)
gnome	evolution	—	—
gnome	evolution	>= 0 < 2.22.2-1.1	2.22.2-1.1
gnome	evolution	>= 0 < 2.22.2-1.1	2.22.2-1.1
gnome	evolution	>= 0 < 2.22.2-1.1	2.22.2-1.1
gnome	evolution	>= 0 < 2.22.2-1.1	2.22.2-1.1

CVSS provenance

nvdv2.07.6HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

osv7.6HIGH

vendor_debian7.6LOW

vendor_redhat7.6HIGH

vendor_ubuntu7.6HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.