CVE-2005-2549

Published: Aug 12, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.

Affected (10)

Products: Gnome: Evolution

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Gnome Evolution	Version 1.5
Gnome Evolution	Version 2.0
Gnome Evolution	Version 2.1
Gnome Evolution	Version 2.2
Gnome Evolution	Version 2.3.1
Gnome Evolution	Version 2.3.2
Gnome Evolution	Version 2.3.3
Gnome Evolution	Version 2.3.4
Gnome Evolution	Version 2.3.5
Gnome Evolution	Version 2.3.6.1

References (26)

http://marc.info/?l=full-disclosure&m=112368237712032&w=2

Source: secalert@redhat.com

http://secunia.com/advisories/16394

Source: secalert@redhat.com

http://secunia.com/advisories/19380

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1016

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2005:141

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2005_54_evolution.html

Source: secalert@redhat.com

http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2005-267.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/407789

Source: secalert@redhat.com

http://www.securityfocus.com/bid/14532

Source: secalert@redhat.com

http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9553

Source: secalert@redhat.com

https://usn.ubuntu.com/166-1/

Source: secalert@redhat.com

http://marc.info/?l=full-disclosure&m=112368237712032&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/16394

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19380

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2006/dsa-1016

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDKSA-2005:141

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2005_54_evolution.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2005-267.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/407789

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/14532

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9553

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/166-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.