CVEvulnerability

CVE-2006-0528

5.0 MEDIUM Published 2006-02-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-02-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.

Affected configurations

• gnome evolution 2.3.1 • gnome evolution 2.3.2 • gnome evolution 2.3.3 • gnome evolution 2.3.4 • gnome evolution 2.3.5 • gnome evolution 2.3.6 • gnome evolution 2.3.6.1 • gnome evolution 2.3.7

References