evolution: arbitrary code execution [LWN.net]

Package(s):

evolution

CVE #(s):

CVE-2008-1108

Created:

June 4, 2008

Updated:

June 26, 2008

Description:

From the Red Hat advisory:

A flaw was found in the way Evolution parsed iCalendar timezone attachment data. If mail which included a carefully crafted iCalendar attachment was opened, arbitrary code could be executed as the user running Evolution. (CVE-2008-1108)

Alerts:

CentOS	CESA-2008:0514	2008-06-26
Gentoo	200806-06	2008-06-16
SuSE	SUSE-SA:2008:028	2008-06-13
Mandriva	MDVSA-2008:111	2008-06-10
Ubuntu	USN-615-1	2008-06-06
Fedora	FEDORA-2008-5018	2008-06-06
Fedora	FEDORA-2008-5016	2008-06-06
Fedora	FEDORA-2008-4990	2008-06-06
CentOS	CESA-2008:0515	2008-06-04
CentOS	CESA-2008:0516	2008-06-04
Red Hat	RHSA-2008:0515-01	2008-06-04
Red Hat	RHSA-2008:0514-01	2008-06-04
Red Hat	RHSA-2008:0517-01	2008-06-04
Red Hat	RHSA-2008:0516-01	2008-06-04

(Log in to post comments)