Solution
Please Install the Updated Packages.
Insight
Evolution is the integrated collection of e-mail, calendaring, contact management, communications and personal information management (PIM) tools for the GNOME desktop environment.
A flaw was found in the way Evolution parsed iCalendar timezone attachment data. If mail which included a carefully crafted iCalendar attachment was opened, arbitrary code could be executed as the user running Evolution.
(CVE-2008-1108)
Red Hat would like to thank Alin Rad Pop of Secunia Research for responsibly disclosing this issue.
All users of Evolution should upgrade to these updated packages, which contains a backported patch which resolves this issue.
Affected
evolution on CentOS 4
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2008-1108 -
CVSS Base Score: 7.6
AV:N/AC:H/Au:N/C:C/I:C/A:C
Related Vulnerabilities