CVE-2005-0102: Integer Overflow
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-0102?
CVE-2005-0102 has a moderate severity rating due to the potential for local users and remote POP3 servers to exploit buffer overflow vulnerabilities.
How do I fix CVE-2005-0102?
To fix CVE-2005-0102, upgrade to a patched version of Evolution beyond 2.0.2.
What software is affected by CVE-2005-0102?
CVE-2005-0102 affects Evolution 2.0.2 and earlier versions, as well as specific versions of Evolution Data Server.
Can CVE-2005-0102 allow remote code execution?
Yes, CVE-2005-0102 can allow remote code execution through a buffer overflow triggered by a malicious POP3 server.
Is CVE-2005-0102 a local or remote vulnerability?
CVE-2005-0102 is considered both a local and remote vulnerability due to its exploitability by local users and remote malicious actors.