Oval Definition:	oval:org.mitre.oval:def:11385
Revision Date: 2013-04-29 Version: 13 Title: Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel. Description: Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-0587 Platform(s): CentOS Linux 3 CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section evolution is earlier than 0:1.4.5-25.el3 OR evolution-devel is earlier than 0:1.4.5-25.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section evolution28-evolution-data-server-devel is earlier than 0:1.8.0-37.el4_7.2 OR evolution-data-server-devel is earlier than 0:1.0.2-14.el4_7.1 OR evolution-data-server is earlier than 0:1.0.2-14.el4_7.1 OR evolution is earlier than 0:2.0.2-41.el4_7.2 OR evolution28-evolution-data-server is earlier than 0:1.8.0-37.el4_7.2 OR evolution-devel is earlier than 0:2.0.2-41.el4_7.2 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section evolution-data-server-devel is earlier than 0:1.12.3-10.el5_3.3 OR evolution-data-server is earlier than 0:1.12.3-10.el5_3.3 OR evolution-data-server-doc is earlier than 0:1.12.3-10.el5_3.3
BACK