CVE-2003-0130: Medium severity Ximian Evolution vulnerability
Published Mar 21, 2003
·Updated
The handleimage function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.
Affected Software
10 affected components
Ximian Evolution=1.0.3
Ximian Evolution=1.0.4
Ximian Evolution=1.0.5
Ximian Evolution=1.0.6
Ximian Evolution=1.0.7
Ximian Evolution=1.0.8
Ximian Evolution=1.1.1
Ximian Evolution=1.2
Ximian Evolution=1.2.1
Ximian Evolution=1.2.2
Remediation
Patch Available
Event History
Mar 21, 2003
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Mar 24, 2003
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0130?
CVE-2003-0130 has a medium severity rating due to its potential for remote HTML injection.
2
How do I fix CVE-2003-0130?
To fix CVE-2003-0130, update Ximian Evolution to version 1.2.3 or later.
3
What software is affected by CVE-2003-0130?
CVE-2003-0130 affects Ximian Evolution versions 1.0.3 through 1.2.2.
4
What kind of attack can CVE-2003-0130 facilitate?
CVE-2003-0130 can facilitate remote attacks that involve HTML and data injection through malformed MIME Content-ID headers.
5
Is CVE-2003-0130 still a concern today?
While CVE-2003-0130 is an older vulnerability, its impact remains relevant for users of unpatched versions of Ximian Evolution.