CVE-2011-3201
published 2013-03-08CVE-2011-3201: GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the…
PriorityP424medium4.3CVSS 2.0
AVNACMAuNCPINAN
EPSS
2.67%
84.1th percentile
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
Affected
50 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | evolution | — | — |
| gnome | evolution | <= 3.0.3 | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
| gnome | evolution | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
osv4.3MEDIUM
vendor_debian4.3LOW
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
evolution: mailto URL scheme attachment header improper input validation
vendor_redhat·2011-08-25·CVSS 4.3
CVE-2011-3201 [MEDIUM] CWE-356 evolution: mailto URL scheme attachment header improper input validation
evolution: mailto URL scheme attachment header improper input validation
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
Package: evolution (Red Hat Enterprise Linux 4) - Will not fix
Package: evolution (Red Hat Enterprise Linux 5) - Will not fix
Debian
CVE-2011-3201: evolution - GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbit...
vendor_debian·2011·CVSS 4.3
CVE-2011-3201 [MEDIUM] CVE-2011-3201: evolution - GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbit...
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
GHSA
GHSA-vj43-93vc-r5g8: GNOME Evolution before 3
ghsa_unreviewed·2022-05-17
CVE-2011-3201 [MEDIUM] CWE-200 GHSA-vj43-93vc-r5g8: GNOME Evolution before 3
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
OSV
CVE-2011-3201: GNOME Evolution before 3
osv·2013-03-08·CVSS 4.3
CVE-2011-3201 [MEDIUM] CVE-2011-3201: GNOME Evolution before 3
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2011-3201 evolution: mailto: attachment parameter can lead to accidental data exfiltration [fedora-all]
bugzilla·2011-11-25·CVSS 4.3
CVE-2011-3201 [MEDIUM] CVE-2011-3201 evolution: mailto: attachment parameter can lead to accidental data exfiltration [fedora-all]
CVE-2011-3201 evolution: mailto: attachment parameter can lead to accidental data exfiltration [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include this bug ID and the
bug IDs of this bug's parent bugs filed against the "Security Response"
product (the top-level CVE bugs). Please mention the CVE IDs being fixed
in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject
Bugzilla
CVE-2011-3201 evolution: mailto URL scheme attachment header improper input validation
bugzilla·2011-08-25·CVSS 4.3
CVE-2011-3201 [MEDIUM] CVE-2011-3201 evolution: mailto URL scheme attachment header improper input validation
CVE-2011-3201 evolution: mailto URL scheme attachment header improper input validation
This is another Evolution security issue that I found upstream but presume also affects Fedora and would like to put on the Fedora security team's radar. If my filing such bugs is not appreciated, please let me know and I will stop.
Description of problem:
Evolution registers a "mailto:" URL handler that accepts a parameter to attach a local file. Thus, a web site can launch the composer on an email with a confidential file attached and try to trick the user into sending it.
Version-Release number of selected component (if applicable):
Upstream gnome-3-0 branch as of 2011-08-24
How reproducible:
Always
Steps to Reproduce:
1. Go to https://mattmccutchen.net/private/evolution-mailto-test .
2. Click "S
http://rhn.redhat.com/errata/RHSA-2013-0516.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlhttps://bugzilla.gnome.org/show_bug.cgi?id=657374https://bugzilla.redhat.com/show_bug.cgi?id=733504https://exchange.xforce.ibmcloud.com/vulnerabilities/82450https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56https://git.gnome.org/browse/evolution/commit/?id=588c410718068388f8ce0004a71c104a4c89cce3http://rhn.redhat.com/errata/RHSA-2013-0516.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlhttps://bugzilla.gnome.org/show_bug.cgi?id=657374https://bugzilla.redhat.com/show_bug.cgi?id=733504https://exchange.xforce.ibmcloud.com/vulnerabilities/82450https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56https://git.gnome.org/browse/evolution/commit/?id=588c410718068388f8ce0004a71c104a4c89cce3
2013-03-08
Published