CVE-2008-0072

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-06 · updated 2026-06-16
Weakness: CWE-134

Description

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Affected products

GNOME Evolution: through 2.12.3

References

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00003.html
http://secunia.com/advisories/29057
http://secunia.com/advisories/29163
http://secunia.com/advisories/29210
http://secunia.com/advisories/29244
http://secunia.com/advisories/29258
http://secunia.com/advisories/29264
http://secunia.com/advisories/29317
http://secunia.com/advisories/30437
http://secunia.com/advisories/30491
http://secunia.com/secunia_research/2008-8/advisory/
http://security.gentoo.org/glsa/glsa-200803-12.xml

Get alerted when CVE-2008-0072 or the next vulnerability affects your stack