CVE-2008-1108: Buffer Overflow
Published Jun 4, 2008
·Updated
Buffer overflow in Evolution 2.22.1, when the ITip Formatter plugin is disabled, allows remote attackers to execute arbitrary code via a long timezone string in an iCalendar attachment.
Affected Software
1 affected component
Gnome Evolution=2.2.1
Event History
Jun 4, 2008
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1108?
CVE-2008-1108 is classified as a high severity vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2008-1108?
To fix CVE-2008-1108, update Evolution to version 2.22.1 or later.
3
What kind of attack does CVE-2008-1108 enable?
CVE-2008-1108 enables remote attackers to execute arbitrary code through specially crafted iCalendar attachments.
4
Which software versions are affected by CVE-2008-1108?
CVE-2008-1108 affects Evolution version 2.22.1 and earlier versions.
5
What is the cause of CVE-2008-1108?
CVE-2008-1108 is caused by a buffer overflow in the ITip Formatter plugin when it is disabled.