Gnome Evolution vulnerabilities

CVE-2006-0040 [MEDIUM] CVE-2006-0040: GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and me GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a text e-mail with a large number of URLs, possibly due to unknown problems in gtkhtml.

CVE-2002-1765 [MEDIUM] CVE-2002-1765: Evolution 1 Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header.

CVE-2003-0133 [MEDIUM] CVE-2003-0133: GtkHTML, as included in Evolution before 1 GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages.

CVE-2002-1471 [MEDIUM] CVE-2002-1471: The camel component for Ximian Evolution 1 The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack.

CVE-2005-0806 [MEDIUM] CVE-2005-0806: Evolution 2 Evolution 2.0.3 allows remote attackers to cause a denial of service (application crash or hang) via crafted messages, possibly involving charsets in attachment filenames.

CVE-2006-2789 [LOW] CVE-2006-2789: Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabl Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used.

CVE-2021-3349 [LOW] CWE-345 CVE-2021-3349: GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a p GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the best place to change this behavior

CVE-2009-1631 [LOW] CWE-264 CVE-2009-1631: The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolut The Mailer component in Evolution 2.26.1 and earlier uses world-readable permissions for the .evolution directory, and certain directories and files under .evolution/ related to local mail, which allows local users to obtain sensitive information by reading these files.