Vulnerability Details : CVE-2009-0587
Multiple integer overflows in Evolution Data Server (aka evolution-data-server) before 2.24.5 allow context-dependent attackers to execute arbitrary code via a long string that is converted to a base64 representation in (1) addressbook/libebook/e-vcard.c in evc or (2) camel/camel-mime-utils.c in libcamel.
Vulnerability category: Execute code
Products affected by CVE-2009-0587
- cpe:2.3:a:go-evolution:evolution-data-server:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-0587
1.49%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 80 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-0587
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2009-0587
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-0587
-
http://www.securityfocus.com/bid/34100
Patch
-
http://www.mandriva.com/security/advisories?name=MDVSA-2009:078
Mandriva
-
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
[security-announce] SUSE Security Summary Report: SUSE-SR:2010:012
-
http://www.redhat.com/support/errata/RHSA-2009-0354.html
Support
-
http://ocert.org/patches/2008-015/camel-CVE-2009-0587.diff
Patch
-
http://www.debian.org/security/2009/dsa-1813
[SECURITY] [DSA 1813-1] New evolution-data-server packages fix several vulnerabilities
-
http://www.redhat.com/support/errata/RHSA-2009-0355.html
Support
-
http://openwall.com/lists/oss-security/2009/03/12/2
oss-security - [oCERT-2008-015] glib and glib-predecessor heap overflowsPatch
-
http://www.redhat.com/support/errata/RHSA-2009-0358.html
Support
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11385
404 Not Found
-
http://ocert.org/patches/2008-015/evc-CVE-2009-0587.diff
Patch
-
http://www.securityfocus.com/archive/1/501712/100/0/threaded
-
http://www.ubuntu.com/usn/USN-733-1
USN-733-1: evolution-data-server vulnerability | Ubuntu security notices | Ubuntu
-
http://www.ocert.org/advisories/ocert-2008-015.html
oCERT archive
Jump to