medium4.3
CVE-2011-3201
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the fi…
Impact
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Oracle | Solaris | Version 11.2 |
| Gnome | Evolution | through 3.0.3 Versions 1.0.8, 1.2, 1.2.1, 1.2.2, 1.2.3 |
| Redhat | Enterprise Linux Desktop | Version 6.0 |
| Redhat | Enterprise Linux Server | Version 6.0 |
| Redhat | Enterprise Linux Workstation | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2013-0516.html
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- https://bugzilla.gnome.org/show_bug.cgi?id=657374
- https://bugzilla.redhat.com/show_bug.cgi?id=733504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82450
- https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56
- https://git.gnome.org/browse/evolution/commit/?id=588c410718068388f8ce0004a71c104a4c89cce3
- http://rhn.redhat.com/errata/RHSA-2013-0516.html
- http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html
- https://bugzilla.gnome.org/show_bug.cgi?id=657374
- https://bugzilla.redhat.com/show_bug.cgi?id=733504
- https://exchange.xforce.ibmcloud.com/vulnerabilities/82450
- https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56
- https://git.gnome.org/browse/evolution/commit/?id=588c410718068388f8ce0004a71c104a4c89cce3