Back to feed
EUVD-2011-3165 · Published Mar 8, 2013
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
Technologies
Redhat Enterprise Linux ServerRedhat Enterprise Linux WorkstationOracle SolarisRedhat Enterprise Linux DesktopGnome Evolution
Weaknesses
CWE-200
CVSS scores
- v2.04.3
AV:N/AC:M/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://rhn.redhat.com/errata/RHSA-2013-0516.html
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- https://bugzilla.gnome.org/show_bug.cgi?id=657374
- https://bugzilla.redhat.com/show_bug.cgi?id=733504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82450
- https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56
Potentially impacted assets
See if this affects your attack surface
