Debian/evolution: unknown

Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled

Action: Upgrade evolution to 2.22.2-1.1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-1109#Debian:13/evolution
• https://security-tracker.debian.org/tracker/CVE-2008-1109

published 2008-06-04T20:32:00Z · modified 2026-10-23T17:47:21.455409777Z · JSON