CVE-2006-2789

Evolution 2.2.x and 2.3.x in GNOME 2.7 and 2.8, when "load images if sender in addressbook" is enabled, allows remote attackers to cause a denial of service (persistent crash) via a crafted "From" header that triggers an assert error in camel-internet-address.c when a null pointer is used.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:gnome:evolution:2.3.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:evolution:2.3.2:*:*:*:*:*:*:*
cpe:2.3:a:gnome:evolution:2.3.3:*:*:*:*:*:*:*
cpe:2.3:a:gnome:evolution:2.3.4:*:*:*:*:*:*:*
cpe:2.3:a:gnome:evolution:2.3.5:*:*:*:*:*:*:*
cpe:2.3:a:gnome:evolution:2.3.6:*:*:*:*:*:*:*
cpe:2.3:a:gnome:evolution:2.3.6.1:*:*:*:*:*:*:*
cpe:2.3:a:gnome:evolution:2.3.7:*:*:*:*:*:*:*

History

21 Nov 2024, 00:12

Type Values Removed Values Added
References () http://bugzilla.gnome.org/show_bug.cgi?id=309453 - () http://bugzilla.gnome.org/show_bug.cgi?id=309453 -
References () http://bugzilla.gnome.org/show_bug.cgi?id=311440 - () http://bugzilla.gnome.org/show_bug.cgi?id=311440 -
References () http://www.mandriva.com/security/advisories?name=MDKSA-2006:094 - () http://www.mandriva.com/security/advisories?name=MDKSA-2006:094 -
References () http://www.securityfocus.com/bid/18212 - () http://www.securityfocus.com/bid/18212 -

Information

Published : 2006-06-02 22:02

Updated : 2024-11-21 00:12


NVD link : CVE-2006-2789

Mitre link : CVE-2006-2789

CVE.ORG link : CVE-2006-2789


JSON object : View

Products Affected

gnome

  • evolution