The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade evolution-perlUpgrade evolutionUpgrade evolution-develUpgrade evolution-spamassassinUpgrade evolution-helpUpgrade evolution-pstUpgrade evolution-conduits | Dec 1, 2016 | Mar 8, 2013 |
| Debian | — | No solution exists | May 15, 2025 | May 15, 2025 |
| Oracle Solaris | — | Upgrade mail/evolution to version 2.30.3-0.175.2.8.0.4.0 on Solaris 11.2Upgrade mail/evolution/connector/evolution-exchange to version 2.30.3-0.175.2.8.0.4.0 on Solaris 11.2 | May 29, 2017 | Mar 8, 2013 |
| Oracle_linux | — | Upgrade evolution-perlUpgrade evolution-helpUpgrade evolutionUpgrade evolution-conduitsUpgrade evolution-spamassassinUpgrade evolution-develUpgrade evolution-pst | Oct 16, 2024 | Mar 8, 2013 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 25, 2011 |
| Suse | — | Upgrade evolution-langUpgrade evolution-ews-langUpgrade evolution-data-server-x86Upgrade evolution-ewsUpgrade evolutionUpgrade evolution-data-server-32bitUpgrade evolution-develUpgrade evolution-pilotUpgrade evolution-data-server-develUpgrade evolution-data-server-langUpgrade evolution-data-server | Dec 12, 2013 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub