GNOME Evolution Denial Of Service Vulnerability

Bugtraq ID:	16899
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2006-0040
Remote:	Yes
Local:	No
Published:	Mar 01 2006 12:00AM
Updated:	Mar 05 2006 10:06PM
Credit:	Alan Cox is credited with the discovery of this vulnerability.
Vulnerable:	GNOME Evolution 2.3.7 GNOME Evolution 2.3.6 .1 GNOME Evolution 2.3.6 GNOME Evolution 2.3.5 GNOME Evolution 2.3.4 GNOME Evolution 2.3.3 GNOME Evolution 2.3.2 GNOME Evolution 2.3.1 GNOME Evolution 2.2.1 GNOME Evolution 2.2 GNOME Evolution 2.1 GNOME Evolution 2.0.1 GNOME Evolution 2.0 GNOME Evolution 1.5
Not Vulnerable:

GNOME Evolution Denial Of Service Vulnerability

A denial-of-service vulnerability has been reported in Evolution.

A remote attacker may cause a denial-of-service condition in the application, effectively denying service to legitimate users.

GNOME Evolution Denial Of Service Vulnerability


This issue may be triggered by constructing a malicious email message and sending it to a victim user utilizing a vulnerable version of the application.

The following message is sufficient to trigger this issue:
http://zeniv.linux.org.uk/~alan/destroy-evolution.mbox

GNOME Evolution Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]:[email protected].

GNOME Evolution Denial Of Service Vulnerability

References:

• Evolution Product Page (GNOME)
  
• Evolution Emailer DoS (Alan Cox )