CVE-2005-2549
CVE-2005-2549
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) full vCard data, (2) contact data from remote LDAP servers, or (3) task list data from remote servers.
EPSS 4,4% · Correctif disponible
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
evolution Debian:12
- Plages de versions concernées
- ECOSYSTEM: < 2.2.3-3
Mettez à jour vers 2.2.3-3
evolution Debian:13
- Plages de versions concernées
- ECOSYSTEM: < 2.2.3-3
Mettez à jour vers 2.2.3-3
evolution Debian:14
- Plages de versions concernées
- ECOSYSTEM: < 2.2.3-3
Mettez à jour vers 2.2.3-3
Sources originales
- http://www.novell.com/linux/security/advisories/2005_54_evolution.html
- http://www.securityfocus.com/bid/14532
- http://www.redhat.com/support/errata/RHSA-2005-267.html
- http://secunia.com/advisories/19380
- http://www.debian.org/security/2006/dsa-1016
- http://www.redhat.com/archives/fedora-announce-list/2005-August/msg00031.html
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:141
- http://secunia.com/advisories/16394
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9553
- http://www.sitic.se/eng/advisories_and_recommendations/sa05-001.html
- http://www.securityfocus.com/archive/1/407789
- http://marc.info/?l=full-disclosure&m=112368237712032&w=2
- https://usn.ubuntu.com/166-1/
- https://nvd.nist.gov/vuln/detail/CVE-2005-2549