CVE-2006-2789: Low severity Gnome Evolution vulnerability
Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-2789?
CVE-2006-2789 has a moderate severity rating as it allows remote attackers to cause a denial of service through a crafted email header.
How do I fix CVE-2006-2789?
The best way to mitigate CVE-2006-2789 is to disable the 'load images if sender in addressbook' feature in the Evolution email client.
Which versions of Evolution are vulnerable to CVE-2006-2789?
CVE-2006-2789 affects Evolution versions 2.2.x and 2.3.x, specifically including 2.3.1 through 2.3.7.
What types of attacks can exploit CVE-2006-2789?
CVE-2006-2789 can be exploited by sending emails with specially crafted 'From' headers that trigger assertion errors.
Is there a workaround for CVE-2006-2789 if I can't update?
If updating is not an option, you can avoid opening suspicious emails or emails from unknown senders to mitigate the impact of CVE-2006-2789.