CVE-2007-1266: gnome evolution

EPSS trend

Probability

5.21%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

+0.16 pp

From 5.05% on 19-09-2026

19-09-202619-10-2026

EPSS score

5.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (coresecurity.com)
Maturity: unknown
exploit-databaseremotelinuxVerified
Gnome Evolution 2.x - GnuPG Arbitrary Content Injection
Maturity: weaponized

References

10 links

lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.htmlMailing ListX Refsource MLIST
securityreason.com/securityalert/2353Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/archive/1/461958/30/7710/threadedMailing ListX Refsource BUGTRAQ
www.securityfocus.com/bid/22760VDB EntryX Refsource BID
www.coresecurity.com?action=item&id=1687X Refsource MISCExploitPatchVendor Advisory
www.securityfocus.com/archive/1/461958/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/24412Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1017727VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2007/0835VDB EntryX Refsource VUPEN
security-tracker.debian.org/tracker/CVE-2007-1266Advisory

Related vulnerabilities

CVE-2018-15587debianevolution+412.44%7y ago11-02-2019 17:00GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.CVE-2018-12422debianevolution-data-server+31.79%8y ago15-06-2018 16:00addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the required string length first, and then allocated a large-enough buffer on the heap.CVE-2013-4166debianevolution+901.89%6y ago06-02-2020 14:29The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers to obtain sensitive information.CVE-2005-2549debianevolution+14.43%21y ago12-08-2005 04:00Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.CVE-2005-2550debianevolution+14.43%21y ago12-08-2005 04:00Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.CVE-2005-0102debianevolution+53.18%21y ago29-01-2005 05:00Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.

All vulnerabilities inevolution

CVE-2007-1266: gnome evolution

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References