Gnome Evolution iCalendar Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	29527
Class:	Boundary Condition Error
CVE:	CVE-2008-1108 CVE-2008-1109
Remote:	Yes
Local:	No
Published:	Jun 04 2008 12:00AM
Updated:	Apr 13 2015 09:33PM
Credit:	Alin Rad Pop, Secunia Research
Vulnerable:	SuSE SUSE Linux Enterprise SDK 10.SP1 SuSE SUSE Linux Enterprise SDK 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP1 SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO Sun Solaris 10_x86 S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 S.u.S.E. Novell Linux Desktop 9.0 Redhat Fedora 7 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux Optional Productivity Application 5 server Redhat Enterprise Linux ES 4.5.z Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4.5.z Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Desktop 4.0 Redhat Desktop 3.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 GNOME Evolution 2.22.2 + Ubuntu Ubuntu Linux 8.04 LTS sparc + Ubuntu Ubuntu Linux 8.04 LTS powerpc + Ubuntu Ubuntu Linux 8.04 LTS lpia + Ubuntu Ubuntu Linux 8.04 LTS i386 + Ubuntu Ubuntu Linux 8.04 LTS amd64 GNOME Evolution 2.22.1 GNOME Evolution 2.12.1 + Ubuntu Ubuntu Linux 7.10 sparc + Ubuntu Ubuntu Linux 7.10 powerpc + Ubuntu Ubuntu Linux 7.10 lpia + Ubuntu Ubuntu Linux 7.10 i386 + Ubuntu Ubuntu Linux 7.10 amd64 GNOME Evolution 2.10.1 + Ubuntu Ubuntu Linux 7.04 sparc + Ubuntu Ubuntu Linux 7.04 powerpc + Ubuntu Ubuntu Linux 7.04 i386 + Ubuntu Ubuntu Linux 7.04 amd64 GNOME Evolution 2.6.1 + Ubuntu Ubuntu Linux 6.06 LTS sparc + Ubuntu Ubuntu Linux 6.06 LTS powerpc + Ubuntu Ubuntu Linux 6.06 LTS i386 + Ubuntu Ubuntu Linux 6.06 LTS amd64 Gentoo Linux
Not Vulnerable:

Gnome Evolution iCalendar Multiple Buffer Overflow Vulnerabilities

Gnome Evolution is prone to multiple buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied input before copying it to insufficiently sized buffers. The issues arise when the application handles iCalendar attachments.

Successfully exploiting these issues will allow an attacker to execute arbitrary code in the context of the application. Failed exploit attempts will likely crash the application.

Gnome Evolution 2.21.1 is vulnerable to these issues; other versions may also be affected.

Gnome Evolution iCalendar Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Gnome Evolution iCalendar Multiple Buffer Overflow Vulnerabilities

Solution:
Fixes are available. Please see the referenced advisories for details.


GNOME Evolution 2.10.1

• Ubuntu evolution-common_2.10.1-0ubuntu2.4_all.deb
  Architecture independent package
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-comm on_2.10.1-0ubuntu2.4_all.deb


• Ubuntu evolution-dbg_2.10.1-0ubuntu2.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.10.1-0ubuntu2.4_amd64.deb


• Ubuntu evolution-dbg_2.10.1-0ubuntu2.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.10.1-0ubuntu2.4_i386.deb


• Ubuntu evolution-dbg_2.10.1-0ubuntu2.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.10.1-0ubuntu2.4_powerpc.deb


• Ubuntu evolution-dbg_2.10.1-0ubuntu2.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.10.1-0ubuntu2.4_sparc.deb


• Ubuntu evolution-dev_2.10.1-0ubuntu2.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.10.1-0ubuntu2.4_amd64.deb


• Ubuntu evolution-dev_2.10.1-0ubuntu2.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.10.1-0ubuntu2.4_i386.deb


• Ubuntu evolution-dev_2.10.1-0ubuntu2.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.10.1-0ubuntu2.4_powerpc.deb


• Ubuntu evolution-dev_2.10.1-0ubuntu2.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.10.1-0ubuntu2.4_sparc.deb


• Ubuntu evolution-plugins-experimental_2.10.1-0ubuntu2.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.10.1-0ubuntu2.4_amd64.deb


• Ubuntu evolution-plugins-experimental_2.10.1-0ubuntu2.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.10.1-0ubuntu2.4_i386.deb


• Ubuntu evolution-plugins-experimental_2.10.1-0ubuntu2.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.10.1-0ubuntu2.4_powerpc.deb


• Ubuntu evolution-plugins-experimental_2.10.1-0ubuntu2.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.10.1-0ubuntu2.4_sparc.deb


• Ubuntu evolution-plugins_2.10.1-0ubuntu2.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.10.1-0ubuntu2.4_amd64.deb


• Ubuntu evolution-plugins_2.10.1-0ubuntu2.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.10.1-0ubuntu2.4_i386.deb


• Ubuntu evolution-plugins_2.10.1-0ubuntu2.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.10.1-0ubuntu2.4_powerpc.deb


• Ubuntu evolution-plugins_2.10.1-0ubuntu2.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.10.1-0ubuntu2.4_sparc.deb


• Ubuntu evolution_2.10.1-0ubuntu2.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.10 .1-0ubuntu2.4_amd64.deb


• Ubuntu evolution_2.10.1-0ubuntu2.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.10 .1-0ubuntu2.4_i386.deb


• Ubuntu evolution_2.10.1-0ubuntu2.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.10 .1-0ubuntu2.4_powerpc.deb


• Ubuntu evolution_2.10.1-0ubuntu2.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.10 .1-0ubuntu2.4_sparc.deb

GNOME Evolution 2.12.1

• Ubuntu evolution-common_2.12.1-0ubuntu1.3_all.deb
  Architecture independent package
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-comm on_2.12.1-0ubuntu1.3_all.deb


• Ubuntu evolution-dbg_2.12.1-0ubuntu1.3_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.12.1-0ubuntu1.3_amd64.deb


• Ubuntu evolution-dbg_2.12.1-0ubuntu1.3_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.12.1-0ubuntu1.3_i386.deb


• Ubuntu evolution-dbg_2.12.1-0ubuntu1.3_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-dbg_2.12.1-0ub untu1.3_lpia.deb


• Ubuntu evolution-dbg_2.12.1-0ubuntu1.3_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.12.1-0ubuntu1.3_powerpc.deb


• Ubuntu evolution-dbg_2.12.1-0ubuntu1.3_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.12.1-0ubuntu1.3_sparc.deb


• Ubuntu evolution-dev_2.12.1-0ubuntu1.3_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.12.1-0ubuntu1.3_amd64.deb


• Ubuntu evolution-dev_2.12.1-0ubuntu1.3_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.12.1-0ubuntu1.3_i386.deb


• Ubuntu evolution-dev_2.12.1-0ubuntu1.3_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-dev_2.12.1-0ub untu1.3_lpia.deb


• Ubuntu evolution-dev_2.12.1-0ubuntu1.3_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.12.1-0ubuntu1.3_powerpc.deb


• Ubuntu evolution-dev_2.12.1-0ubuntu1.3_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.12.1-0ubuntu1.3_sparc.deb


• Ubuntu evolution-plugins-experimental_2.12.1-0ubuntu1.3_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.12.1-0ubuntu1.3_amd64.deb


• Ubuntu evolution-plugins-experimental_2.12.1-0ubuntu1.3_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.12.1-0ubuntu1.3_i386.deb


• Ubuntu evolution-plugins-experimental_2.12.1-0ubuntu1.3_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/universe/e/evolution/evolution-plugins-ex perimental_2.12.1-0ubuntu1.3_lpia.deb


• Ubuntu evolution-plugins-experimental_2.12.1-0ubuntu1.3_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.12.1-0ubuntu1.3_powerpc.deb


• Ubuntu evolution-plugins-experimental_2.12.1-0ubuntu1.3_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.12.1-0ubuntu1.3_sparc.deb


• Ubuntu evolution-plugins_2.12.1-0ubuntu1.3_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.12.1-0ubuntu1.3_amd64.deb


• Ubuntu evolution-plugins_2.12.1-0ubuntu1.3_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.12.1-0ubuntu1.3_i386.deb


• Ubuntu evolution-plugins_2.12.1-0ubuntu1.3_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-plugins_2.12.1 -0ubuntu1.3_lpia.deb


• Ubuntu evolution-plugins_2.12.1-0ubuntu1.3_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.12.1-0ubuntu1.3_powerpc.deb


• Ubuntu evolution-plugins_2.12.1-0ubuntu1.3_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.12.1-0ubuntu1.3_sparc.deb


• Ubuntu evolution_2.12.1-0ubuntu1.3_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.12 .1-0ubuntu1.3_amd64.deb


• Ubuntu evolution_2.12.1-0ubuntu1.3_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.12 .1-0ubuntu1.3_i386.deb


• Ubuntu evolution_2.12.1-0ubuntu1.3_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution_2.12.1-0ubuntu 1.3_lpia.deb


• Ubuntu evolution_2.12.1-0ubuntu1.3_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.12 .1-0ubuntu1.3_powerpc.deb


• Ubuntu evolution_2.12.1-0ubuntu1.3_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.12 .1-0ubuntu1.3_sparc.deb

GNOME Evolution 2.22.2

• Ubuntu evolution-common_2.22.2-0ubuntu1.2_all.deb
  Architecture independent packages
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-comm on_2.22.2-0ubuntu1.2_all.deb


• Ubuntu evolution-dbg_2.22.2-0ubuntu1.2_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.22.2-0ubuntu1.2_amd64.deb


• Ubuntu evolution-dbg_2.22.2-0ubuntu1.2_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.22.2-0ubuntu1.2_i386.deb


• Ubuntu evolution-dbg_2.22.2-0ubuntu1.2_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-dbg_2.22.2-0ub untu1.2_lpia.deb


• Ubuntu evolution-dbg_2.22.2-0ubuntu1.2_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-dbg_2.22.2-0ub untu1.2_powerpc.deb


• Ubuntu evolution-dbg_2.22.2-0ubuntu1.2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-dbg_2.22.2-0ub untu1.2_sparc.deb


• Ubuntu evolution-dev_2.22.2-0ubuntu1.2_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.22.2-0ubuntu1.2_amd64.deb


• Ubuntu evolution-dev_2.22.2-0ubuntu1.2_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.22.2-0ubuntu1.2_i386.deb


• Ubuntu evolution-dev_2.22.2-0ubuntu1.2_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-dev_2.22.2-0ub untu1.2_lpia.deb


• Ubuntu evolution-dev_2.22.2-0ubuntu1.2_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-dev_2.22.2-0ub untu1.2_powerpc.deb


• Ubuntu evolution-dev_2.22.2-0ubuntu1.2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-dev_2.22.2-0ub untu1.2_sparc.deb


• Ubuntu evolution-plugins-experimental_2.22.2-0ubuntu1.2_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.22.2-0ubuntu1.2_amd64.deb


• Ubuntu evolution-plugins-experimental_2.22.2-0ubuntu1.2_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/universe/e/evolution/evolution- plugins-experimental_2.22.2-0ubuntu1.2_i386.deb


• Ubuntu evolution-plugins-experimental_2.22.2-0ubuntu1.2_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/universe/e/evolution/evolution-plugins-ex perimental_2.22.2-0ubuntu1.2_lpia.deb


• Ubuntu evolution-plugins-experimental_2.22.2-0ubuntu1.2_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://ports.ubuntu.com/pool/universe/e/evolution/evolution-plugins-ex perimental_2.22.2-0ubuntu1.2_powerpc.deb


• Ubuntu evolution-plugins-experimental_2.22.2-0ubuntu1.2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://ports.ubuntu.com/pool/universe/e/evolution/evolution-plugins-ex perimental_2.22.2-0ubuntu1.2_sparc.deb


• Ubuntu evolution-plugins_2.22.2-0ubuntu1.2_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.22.2-0ubuntu1.2_amd64.deb


• Ubuntu evolution-plugins_2.22.2-0ubuntu1.2_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.22.2-0ubuntu1.2_i386.deb


• Ubuntu evolution-plugins_2.22.2-0ubuntu1.2_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-plugins_2.22.2 -0ubuntu1.2_lpia.deb


• Ubuntu evolution-plugins_2.22.2-0ubuntu1.2_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-plugins_2.22.2 -0ubuntu1.2_powerpc.deb


• Ubuntu evolution-plugins_2.22.2-0ubuntu1.2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution-plugins_2.22.2 -0ubuntu1.2_sparc.deb


• Ubuntu evolution_2.22.2-0ubuntu1.2_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.22 .2-0ubuntu1.2_amd64.deb


• Ubuntu evolution_2.22.2-0ubuntu1.2_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.22 .2-0ubuntu1.2_i386.deb


• Ubuntu evolution_2.22.2-0ubuntu1.2_lpia.deb
  lpia architecture (Low Power Intel Architecture)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution_2.22.2-0ubuntu 1.2_lpia.deb


• Ubuntu evolution_2.22.2-0ubuntu1.2_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution_2.22.2-0ubuntu 1.2_powerpc.deb


• Ubuntu evolution_2.22.2-0ubuntu1.2_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://ports.ubuntu.com/pool/main/e/evolution/evolution_2.22.2-0ubuntu 1.2_sparc.deb

GNOME Evolution 2.6.1

• Ubuntu evolution-dbg_2.6.1-0ubuntu7.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.6.1-0ubuntu7.4_amd64.deb


• Ubuntu evolution-dbg_2.6.1-0ubuntu7.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.6.1-0ubuntu7.4_i386.deb


• Ubuntu evolution-dbg_2.6.1-0ubuntu7.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.6.1-0ubuntu7.4_powerpc.deb


• Ubuntu evolution-dbg_2.6.1-0ubuntu7.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dbg_ 2.6.1-0ubuntu7.4_sparc.deb


• Ubuntu evolution-dev_2.6.1-0ubuntu7.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.6.1-0ubuntu7.4_amd64.deb


• Ubuntu evolution-dev_2.6.1-0ubuntu7.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.6.1-0ubuntu7.4_i386.deb


• Ubuntu evolution-dev_2.6.1-0ubuntu7.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.6.1-0ubuntu7.4_powerpc.deb


• Ubuntu evolution-dev_2.6.1-0ubuntu7.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-dev_ 2.6.1-0ubuntu7.4_sparc.deb


• Ubuntu evolution-plugins_2.6.1-0ubuntu7.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.6.1-0ubuntu7.4_amd64.deb


• Ubuntu evolution-plugins_2.6.1-0ubuntu7.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.6.1-0ubuntu7.4_i386.deb


• Ubuntu evolution-plugins_2.6.1-0ubuntu7.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.6.1-0ubuntu7.4_powerpc.deb


• Ubuntu evolution-plugins_2.6.1-0ubuntu7.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution-plug ins_2.6.1-0ubuntu7.4_sparc.deb


• Ubuntu evolution_2.6.1-0ubuntu7.4_amd64.deb
  amd64 architecture (Athlon64, Opteron, EM64T Xeon)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.6. 1-0ubuntu7.4_amd64.deb


• Ubuntu evolution_2.6.1-0ubuntu7.4_i386.deb
  i386 architecture (x86 compatible Intel/AMD)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.6. 1-0ubuntu7.4_i386.deb


• Ubuntu evolution_2.6.1-0ubuntu7.4_powerpc.deb
  powerpc architecture (Apple Macintosh G3/G4/G5)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.6. 1-0ubuntu7.4_powerpc.deb


• Ubuntu evolution_2.6.1-0ubuntu7.4_sparc.deb
  sparc architecture (Sun SPARC/UltraSPARC)
  http://security.ubuntu.com/ubuntu/pool/main/e/evolution/evolution_2.6. 1-0ubuntu7.4_sparc.deb

Gnome Evolution iCalendar Multiple Buffer Overflow Vulnerabilities

References:

• CVE-2008-1108, CVE-2008-1109 vulnerabilities in Gnome Evolution (Oracle)
  
• Evolution Homepage (GNOME)
  
• RHSA-2008:0514-9 - Important: evolution security update (Red Hat)
  
• RHSA-2008:0515-7 evolution28 security update (Red Hat)
  
• RHSA-2008:0516-8 - Critical: evolution security update (Red Hat)
  
• RHSA-2008:0517-10 - Critical: evolution security update (Red Hat)
  
• Secunia Research: Evolution iCalendar DESCRIPTION Property Buffer Overflow (Secunia Research)
  
• Secunia Research: Evolution iCalendar Timezone Buffer Overflow (Secunia Research)