CVE-2005-2550: High severity Gnome Evolution vulnerability
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-2550?
CVE-2005-2550 is considered a critical vulnerability because it can lead to denial of service and potentially allow arbitrary code execution.
How do I fix CVE-2005-2550?
To fix CVE-2005-2550, update Evolution to a version that is not affected, such as version 2.4 or later.
What versions of Evolution are affected by CVE-2005-2550?
CVE-2005-2550 affects Evolution versions 1.4 through 2.3.6.1.
What kind of attack can exploit CVE-2005-2550?
CVE-2005-2550 can be exploited by crafting malicious calendar entries that lead to crashes or arbitrary code execution.
Is there a workaround for CVE-2005-2550?
A temporary workaround for CVE-2005-2550 is to avoid using the Calendars tab in affected versions of Evolution.