CVE

Id
6959  
CVE No.
CVE-2003-0130  
Status
Candidate  
Description
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.  
Phase
Assigned (20030313)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
40291 6959 CVE-2003-0130 BUGTRAQ:20030319 CORE-2003-03-04-01: Multiple vulnerabilities in Ximian "s Evolution Mail User Agent  View
40292 6959 CVE-2003-0130 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0141.html  View
40293 6959 CVE-2003-0130 MISC:http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10  View
40294 6959 CVE-2003-0130 GENTOO:GLSA-200303-18  View
40295 6959 CVE-2003-0130 URL:http://www.gentoo.org/security/en/glsa/glsa-200303-18.xml  View
40296 6959 CVE-2003-0130 REDHAT:RHSA-2003:108  View
40297 6959 CVE-2003-0130 URL:http://www.redhat.com/support/errata/RHSA-2003-108.html  View
40298 6959 CVE-2003-0130 MANDRAKE:MDKSA-2003:045  View
40299 6959 CVE-2003-0130 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:045  View
40300 6959 CVE-2003-0130 CONECTIVA:CLA-2003:648  View
40301 6959 CVE-2003-0130 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000648  View
40302 6959 CVE-2003-0130 BUGTRAQ:20030321 GLSA: evolution (200303-18)  View
40303 6959 CVE-2003-0130 URL:http://marc.info/?l=bugtraq&m=104826470527308&w=2  View
40304 6959 CVE-2003-0130 BID:7119  View
40305 6959 CVE-2003-0130 URL:http://www.securityfocus.com/bid/7119  View
40306 6959 CVE-2003-0130 OVAL:oval:org.mitre.oval:def:111  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63369 JVNDB-2003-000095 OpenSSL の RSA 暗号化アルゴリズムにおける情報漏洩の脆弱性 OpenSSL には RSA が暗号化アルゴリズムに利用されている場合、PKCS#1 の処理内でのバージョン番号の取り扱いの不備により、クライアントとサーバの間でセッションに渡って共有される秘密の値) が漏洩する脆弱性が存在します。 CVE-2003-0131 6959 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000095.html  View