// For flags

CVE-2007-1002

evolution format string flaw

Severity Score

8.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.

Vulnerabilidad de cadena de formato en la función write_html en calendar/gui/e-cal-component-memo-preview.c de Evolution Shared Memo 2.8.2.1, y posiblemente versiones anteriores, permite a atacantes remotos con la intervención del usuario ejecutar código de su elección mediante especificadores de formato en las categorías de un memorándum compartido manipulado.

Secunia Research has discovered a vulnerability in Evolution, which can be exploited by malicious people to potentially compromise a vulnerable system. A format string error in the "write_html()" function in calendar/gui/ e-cal-component-memo-preview.c when displaying a memo's categories can potentially be exploited to execute arbitrary code via a specially crafted shared memo containing format specifiers. Evolution version 2.8.2.1 is affected. Other versions may also be affected.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-02-16 CVE Reserved
  • 2007-03-21 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-06-05 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
CAPEC
References (22)
URL Tag Source
http://secunia.com/advisories/24651 Third Party Advisory
http://secunia.com/advisories/24668 Third Party Advisory
http://secunia.com/advisories/25102 Third Party Advisory
http://secunia.com/advisories/25551 Third Party Advisory
http://secunia.com/advisories/25880 Third Party Advisory
http://www.securityfocus.com/archive/1/463406/100/0/threaded Mailing List
http://www.securityfocus.com/archive/1/464820/30/7170/threaded Mailing List
http://www.securityfocus.com/bid/23073 Vdb Entry
http://www.securitytracker.com/id?1017808 Vdb Entry
http://www.vupen.com/english/advisories/2007/1058 Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33106 Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10100 Signature
URL Date SRC
URL Date SRC
URL Date SRC
http://secunia.com/advisories/24234 2018-10-16
http://secunia.com/secunia_research/2007-44/advisory 2018-10-16
http://security.gentoo.org/glsa/glsa-200706-02.xml 2018-10-16
http://www.debian.org/security/2007/dsa-1325 2018-10-16
http://www.mandriva.com/security/advisories?name=MDKSA-2007:070 2018-10-16
http://www.novell.com/linux/security/advisories/2007_15_sr.html 2018-10-16
http://www.ubuntu.com/usn/usn-442-1 2018-10-16
https://rhn.redhat.com/errata/RHSA-2007-0158.html 2018-10-16
https://access.redhat.com/security/cve/CVE-2007-1002 2007-05-03
https://bugzilla.redhat.com/show_bug.cgi?id=233587 2007-05-03
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Evolution
Search vendor "Evolution"
 Shared Memo
Search vendor "Evolution" for product "Shared Memo"
 2.8.2.1
Search vendor "Evolution" for product "Shared Memo" and version "2.8.2.1"
-
Affected