NVD

Id
1070  
Name
CVE-2008-1109  
Description
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-04  
Modified Date
2011-03-07  
Seq
2008-1109  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6629 1070 CVE-2008-1109 SUSE-SA:2008:028  View
6630 1070 CVE-2008-1109 oval:org.mitre.oval:def:10337  View
6631 1070 CVE-2008-1109 GLSA-200806-06  View
6632 1070 CVE-2008-1109 MDVSA-2008:111  View
6633 1070 CVE-2008-1109 RHSA-2008:0514  View
6634 1070 CVE-2008-1109 RHSA-2008:0515  View
6635 1070 CVE-2008-1109 29527  View
6636 1070 CVE-2008-1109 1020170  View
6637 1070 CVE-2008-1109 USN-615-1  View
6638 1070 CVE-2008-1109 ADV-2008-1732  View
6639 1070 CVE-2008-1109 evolution-icalendar-description-bo(42826)  View
6640 1070 CVE-2008-1109 FEDORA-2008-4990  View
6641 1070 CVE-2008-1109 FEDORA-2008-5016  View
6642 1070 CVE-2008-1109 FEDORA-2008-5018  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46117 JVNDB-2008-001427 Evolution の iCalendar 添付ファイルの処理に関するヒープベースのバッファオーバーフローの脆弱性 Evolution には、iCalendar 添付ファイルの DESCRIPTION プロパティの処理に不備があり、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-1109 31222 CVE-2008-1109 1070 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001427.html 2008-06-04 2011-05-09 View