Vulnerability Report

CVE-2008-0072

RCE

Title: Gnome Evolution RCE

RCE

Proof Of Concept

No public PoC currently indexed for CVE-2008-0072.

CWE Category CWE-134
Published Date Mar 06, 2008
Modified Date Jun 16, 2026
Exploit Status Not Found
Score 6.8 CVSS v2.0
Exploit Probability (EPSS)
6.02%

Vulnerability Summary

CVE-2008-0072: Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Impacted Vendors

X
ximian 1
G
gnome 1
E
evolution 1

Reference Links

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00003.html http://secunia.com/advisories/29057 http://secunia.com/advisories/29163 http://secunia.com/advisories/29210 http://secunia.com/advisories/29244 http://secunia.com/advisories/29258 http://secunia.com/advisories/29264 http://secunia.com/advisories/29317 http://secunia.com/advisories/30437 http://secunia.com/advisories/30491 http://secunia.com/secunia_research/2008-8/advisory/ http://security.gentoo.org/glsa/glsa-200803-12.xml http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0105 http://www.debian.org/security/2008/dsa-1512 http://www.kb.cert.org/vuls/id/512491 http://www.mandriva.com/security/advisories?name=MDVSA-2008:063 http://www.redhat.com/support/errata/RHSA-2008-0177.html http://www.redhat.com/support/errata/RHSA-2008-0178.html http://www.securityfocus.com/archive/1/492684/100/0/threaded http://www.securityfocus.com/bid/28102 http://www.securitytracker.com/id?1019540 http://www.ubuntu.com/usn/usn-583-1 http://www.vupen.com/english/advisories/2008/0768/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41011 https://issues.rpath.com/browse/RPL-2310 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10701 https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00190.html https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00195.html http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00003.html http://secunia.com/advisories/29057 http://secunia.com/advisories/29163 http://secunia.com/advisories/29210 http://secunia.com/advisories/29244 http://secunia.com/advisories/29258 http://secunia.com/advisories/29264 http://secunia.com/advisories/29317 http://secunia.com/advisories/30437 http://secunia.com/advisories/30491 http://secunia.com/secunia_research/2008-8/advisory/ http://security.gentoo.org/glsa/glsa-200803-12.xml http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0105 http://www.debian.org/security/2008/dsa-1512 http://www.kb.cert.org/vuls/id/512491 http://www.mandriva.com/security/advisories?name=MDVSA-2008:063 http://www.redhat.com/support/errata/RHSA-2008-0177.html http://www.redhat.com/support/errata/RHSA-2008-0178.html http://www.securityfocus.com/archive/1/492684/100/0/threaded http://www.securityfocus.com/bid/28102 http://www.securitytracker.com/id?1019540 http://www.ubuntu.com/usn/usn-583-1 http://www.vupen.com/english/advisories/2008/0768/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41011 https://issues.rpath.com/browse/RPL-2310 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10701 https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00190.html https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00195.html
CVSS v2.0
Source Entity [email protected]
Severity MEDIUM
6.8
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:M/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2008-0072 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.