Description
Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.redhat.com/support/errata/RHSA-2007-0510.html ↗
- http://secunia.com/advisories/25894 ↗
- http://www.securityfocus.com/archive/1/471455/100/0/threaded ↗
- http://www.vupen.com/english/advisories/2007/2282 ↗
- http://secunia.com/advisories/26083 ↗
- http://security.gentoo.org/glsa/glsa-200711-04.xml ↗
- http://secunia.com/advisories/25880 ↗
- http://www.securitytracker.com/id?1018284 ↗
- http://www.novell.com/linux/security/advisories/2007_14_sr.html ↗
- http://www.debian.org/security/2007/dsa-1325 ↗
- http://www.ubuntu.com/usn/usn-475-1 ↗
- http://secunia.com/advisories/25766 ↗
- http://secunia.com/advisories/25843 ↗
- http://secunia.com/advisories/25798 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200707-03.xml ↗
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:136 ↗
- http://secunia.com/advisories/25777 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11724 ↗
- http://www.redhat.com/support/errata/RHSA-2007-0509.html ↗
- http://osvdb.org/37489 ↗
- http://www.securityfocus.com/bid/24567 ↗
- http://mail.gnome.org/archives/evolution-hackers/2007-June/msg00064.html ↗
- http://secunia.com/advisories/25906 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34964 ↗
- http://www.debian.org/security/2007/dsa-1321 ↗
- http://www.novell.com/linux/security/advisories/2007_42_evolution.html ↗
- http://secunia.com/advisories/25774 ↗
- http://secunia.com/advisories/25958 ↗
- http://secunia.com/advisories/25793 ↗
- http://bugzilla.gnome.org/show_bug.cgi?id=447414 ↗
- http://secunia.com/advisories/25765 ↗