Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.
The product uses a function that accepts a format string as an argument, but the format string originates from an external source.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | * | * |
| Red Hat Enterprise Linux 4 | RedHat | evolution-0:2.0.2-35.0.4.el4_6.1 | * |
| Red Hat Enterprise Linux 4 | RedHat | evolution28-0:2.8.0-53.el4_6.2 | * |
| Red Hat Enterprise Linux 4.5 Z Stream | RedHat | evolution-0:2.0.2-35.0.4.el4_5.1 | * |
| Red Hat Enterprise Linux 5 | RedHat | evolution-0:2.8.0-40.el5_1.1 | * |
| Evolution | Ubuntu | dapper | * |
| Evolution | Ubuntu | devel | * |
| Evolution | Ubuntu | edgy | * |
| Evolution | Ubuntu | feisty | * |
| Evolution | Ubuntu | gutsy | * |
| Evolution | Ubuntu | upstream | * |