Browse CVEs

MEDIUM 6.8 CVE-2007-5007 Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to execute arbitrary code via a long … Balsa Patch available Fix from $1,6002007-12-12 MEDIUM 6.8 CVE-2007-3257 Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negativ… Evolution Mitigation only Fix from $1,6002007-06-19 HIGH 9.3 CVE-2007-0999 Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a… Ekiga after 2.0.3 Fix from $1,9502007-03-10 MEDIUM 5.0 CVE-2007-1266EPSS 5% Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolution from visually distinguishing… Evolution after 2.8.1 Fix from $1,6002007-03-06 MEDIUM 5.0 CVE-2006-3057 Unspecified vulnerability in NetworkManager daemon for DHCP (dhcdbd) allows remote attackers to cause a denial of service (crash) via certain invalid… Dhcdbd Mitigation only Fix from $1,6002006-06-16 HIGH 7.8 CVE-2006-0819 Dwarf HTTP Server 1.3.2 allows remote attackers to obtain the source code of JSP files via (1) dot, (2) space, (3) slash, or (4) NULL characters in t… Dwarf Http Server Patch available Fix from $1,9502006-03-13 MEDIUM 5.0 CVE-2006-0040 GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a text e-mail with a large … Evolution Mitigation only Fix from $1,6002006-03-10 MEDIUM 5.0 CVE-2006-0528EPSS 11% The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persisten… Evolution No fix yet Fix from $1,6002006-02-02 HIGH 7.8 CVE-2005-2975 io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service (infinite loop) via a craft… Gdkpixbuf 2.8.7+ Fix from $1,9502005-11-18 HIGH 7.5 CVE-2005-2976 Integer overflow in io-xpm.c in gdk-pixbuf 0.22.0 in GTK+ before 2.8.7 allows attackers to cause a denial of service (crash) or execute arbitrary cod… Gdkpixbuf 2.8.7+ Fix from $1,9502005-11-18 HIGH 7.5 CVE-2005-3186 Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a n… Gdkpixbuf Patch available Fix from $1,9502005-11-18 HIGH 7.5 CVE-2005-2958 Multiple format string vulnerabilities in the GNOME Data Access library for GNOME2 (libgda2) 1.2.1 and earlier allow attackers to execute arbitrary c… Libgda2 after 1.2.1 Fix from $1,9502005-10-25 HIGH 7.5 CVE-2005-2549 Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service (crash) and possibly exec… Evolution Mitigation only Fix from $1,9502005-08-12 HIGH 7.5 CVE-2005-2550 Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitr… Evolution Mitigation only Fix from $1,9502005-08-12 HIGH 7.5 CVE-2005-2410 Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string… Networkmanager 0.4.1+ Fix from $1,9502005-08-01 HIGH 7.5 CVE-2005-0891 Double free vulnerability in gtk 2 (gtk2) before 2.2.4 allows remote attackers to cause a denial of service (crash) via a crafted BMP image. Gtk 2.2.4+ Fix from $1,9502005-05-02 MEDIUM 5.0 CVE-2005-0238 The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are de… Epiphany after 7.54 Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2005-0372 Directory traversal vulnerability in gftp before 2.0.18 for GTK+ allows remote malicious FTP servers to read arbitrary files via .. (dot dot) sequenc… Gtk 2.0.18+ Fix from $1,6002005-05-02 HIGH 7.5 CVE-2004-0782EPSS 9% Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows … Gdkpixbuf Patch available Fix from $1,9502004-10-20 HIGH 7.5 CVE-2004-0783EPSS 9% Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, m… Gdkpixbuf Patch available Fix from $1,9502004-10-20 MEDIUM 5.0 CVE-2004-0753EPSS 6% The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop)… Gdkpixbuf 2.2.4+ Fix from $1,6002004-10-20 MEDIUM 5.0 CVE-2004-0788EPSS 6% Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of servi… Gdkpixbuf 2.2.4+ Fix from $1,6002004-10-20 MEDIUM 5.0 CVE-2003-0541 gtkhtml before 1.1.10, as used in Evolution, allows remote attackers to cause a denial of service (crash) via a malformed message that causes a null … Gtkhtml after 1.1.10 Fix from $1,6002003-09-17 HIGH 10.0 CVE-2003-0407EPSS 16% Buffer overflow in gbnserver for Gnome Batalla Naval 1.0.4 allows remote attackers to execute arbitrary code via a long connection string. Batalla Naval No fix yet Fix from $1,9502003-06-30 MEDIUM 5.0 CVE-2003-0133 GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages. Gtkhtml Patch available Fix from $1,6002003-05-05 HIGH 7.5 CVE-2003-0080 The iptables ruleset in Gnome-lokkit in Red Hat Linux 8.0 does not include any rules in the FORWARD chain, which could allow attackers to bypass inte… Gnome Lokkit Patch available Fix from $1,9502003-03-31 HIGH 7.5 CVE-2001-0928EPSS 6% Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute a… Libgtop Daemon Patch available Fix from $1,9502001-11-28 HIGH 7.5 CVE-2001-0927 Format string vulnerability in the permitted function of GNOME libgtop_daemon in libgtop 1.0.12 and earlier allows remote attackers to execute arbitr… Libgtop Daemon Patch available Fix from $1,9502001-11-27 HIGH 7.2 CVE-2001-0084 GTK+ library allows local users to specify arbitrary modules via the GTK_MODULES environmental variable, which could allow local users to gain privil… Gtk Patch available Fix from $1,9502001-02-12 HIGH 7.2 CVE-2000-0948 GnoRPM before 0.95 allows local users to modify arbitrary files via a symlink attack. Gnorpm after 0.94 Fix from $1,9502000-12-19