Evolution vulnerabilities
2 vulnerabilities
Known vulnerabilities in Evolution products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Evolution1 vulnerabilities
- Shared Memo1 vulnerabilities
CVE-2007-1002debianevolution+4
EPSS score3.39%
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.CVE-2009-0547debianevolution-data-server+1EPSS score2.22%
Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077.