CVE-2007-3257: gnome evolution

EPSS trend

Probability

3.12%

Chance of exploitation in the next 30 days

Percentile

88%

Versus all other CVEs

30-day change

0.00 pp

From 3.12% on 19-09-2026

19-09-202619-10-2026

EPSS score

3.12%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

41 links

www.redhat.com/support/errata/RHSA-2007-0510.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/25894Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/471455/100/0/threadedMailing ListX Refsource BUGTRAQ
www.vupen.com/english/advisories/2007/2282VDB EntryX Refsource VUPEN
secunia.com/advisories/26083Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200711-04.xmlVendor AdvisoryX Refsource GENTOO
secunia.com/advisories/25880Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1018284VDB EntryX Refsource SECTRACK
www.novell.com/linux/security/advisories/2007_14_sr.htmlVendor AdvisoryX Refsource SUSE
www.debian.org/security/2007/dsa-1325Vendor AdvisoryX Refsource DEBIAN

Show all 41 references

www.ubuntu.com/usn/usn-475-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/25766Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25843Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25798Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200707-03.xmlVendor AdvisoryX Refsource GENTOO
www.mandriva.com/security/advisories?name=MDKSA-2007:136Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/25777Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11724VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2007-0509.htmlVendor AdvisoryX Refsource REDHAT
osvdb.org/37489VDB EntryX Refsource OSVDB
www.securityfocus.com/bid/24567VDB EntryX Refsource BID
mail.gnome.org/archives/evolution-hackers/2007-June/msg00064.htmlMailing ListX Refsource MLIST
secunia.com/advisories/25906Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/34964VDB EntryX Refsource XF
www.debian.org/security/2007/dsa-1321Vendor AdvisoryX Refsource DEBIAN
www.novell.com/linux/security/advisories/2007_42_evolution.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/25774Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25958Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25793Third Party AdvisoryX Refsource SECUNIA
bugzilla.gnome.org/show_bug.cgi?id=447414X Refsource MISC
secunia.com/advisories/25765Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2007:0509Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=244277REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0509.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-3257REPORT
www.cve.org/CVERecord?id=CVE-2007-3257Advisory
nvd.nist.gov/vuln/detail/CVE-2007-3257Advisory
access.redhat.com/errata/RHSA-2007:0510Advisory
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0510.jsonAdvisory
security-tracker.debian.org/tracker/CVE-2007-3257Advisory

Related vulnerabilities

CVE-2018-15587debianevolution+412.44%7y ago11-02-2019 17:00GNOME Evolution through 3.28.2 is prone to OpenPGP signatures being spoofed for arbitrary messages using a specially crafted email that contains a valid signature from the entity to be impersonated as an attachment.CVE-2018-12422debianevolution-data-server+31.79%8y ago15-06-2018 16:00addressbook/backends/ldap/e-book-backend-ldap.c in Evolution-Data-Server in GNOME Evolution through 3.29.2 might allow attackers to trigger a Buffer Overflow via a long query that is processed by the strcat function. NOTE: the software maintainer disputes this because "the code had computed the required string length first, and then allocated a large-enough buffer on the heap.CVE-2013-4166debianevolution+901.89%6y ago06-02-2020 14:29The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and earlier does not properly select the GPG key to use for email encryption, which might cause the email to be encrypted with the wrong key and allow remote attackers to obtain sensitive information.CVE-2005-2549debianevolution+14.43%21y ago12-08-2005 04:00Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.CVE-2005-2550debianevolution+14.43%21y ago12-08-2005 04:00Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.CVE-2005-0102debianevolution+53.18%21y ago29-01-2005 05:00Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.

All vulnerabilities inevolution

CVE-2007-3257: gnome evolution

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References