GNOME Evolution Email Attachment Denial Of Service Vulnerability

Bugtraq ID:	18212
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 01 2006 12:00AM
Updated:	Jun 01 2006 09:12PM
Credit:	Nathan Owens is credited with the discovery of this vulnerability.
Vulnerable:	Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 GNOME Evolution 2.3.7 GNOME Evolution 2.3.6 .1 GNOME Evolution 2.3.6 GNOME Evolution 2.3.5 GNOME Evolution 2.3.4 GNOME Evolution 2.3.3 GNOME Evolution 2.3.2 GNOME Evolution 2.3.1
Not Vulnerable:

GNOME Evolution Email Attachment Denial Of Service Vulnerability

A denial-of-service vulnerability has been reported in Evolution.

A remote attacker may cause a denial-of-service condition in the application, effectively denying service to legitimate users.

GNOME Evolution Email Attachment Denial Of Service Vulnerability

An attacker may trigger this issue may by constructing a malicious email message and sending it to a victim user running a vulnerable version of the application.

GNOME Evolution Email Attachment Denial Of Service Vulnerability

Solution:
A patch is available to address this issue. Please see the references for further information.

GNOME Evolution Email Attachment Denial Of Service Vulnerability

References:

• Bug 311440 �?? Crashes on particular e-mail (Nathan Owens)
  
• Evolution Product Page (GNOME)
  
• Proof of Concept (Nathan Owens)
  
• RCS file: /cvs/gnome/evolution/mail/ChangeLog,v (Not Zed)