evolution-data-server
Page content
- Author: voroskoi
- Vulnerable: 1.10.0-1
- Unaffected: 1.10.0-2terminus1
Philip Van Hoof has reported a vulnerability in Evolution, which potentially can be exploited by malicious people to compromise a user’s system. The vulnerability is caused due to the “imap_rescan()” function in camel/providers/imap/camel-imap-folder.c not properly sanitising the “SEQUENCE” value before being used to index arrays. This may be exploited to execute arbitrary code by e.g. tricking a user into using a malicious IMAP server.
- Bug Tracker URL: http://bugs.frugalware.org/task/2207