Every CVE Search/ Get API key

CVE-2003-0296

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of...

7.5 HighFix available

CVE-2003-0296 is a high vulnerability (CVSS 7.5) in Ximian Evolution, published May 15, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.16%, the 82nd percentile. Fixed in evolution 1.3.2.

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Exploit likelihood

2.16%Down 1.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Record
CVE-2003-0296
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Record
CVE-2003-0296
Updated
2026-11-02
EUVDEUVD-2003-0291 No score

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Record
EUVD-2003-0291
Updated
2026-11-03
GitHub AdvisoriesGHSA-xfh3-x4h8-v3cw No score

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of...

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Record
GHSA-xfh3-x4h8-v3cw
Updated
2026-11-02
OSV No score

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Record
CVE-2003-0296
Updated
2026-11-02
OSVDEBIAN-CVE-2003-0296 No score

The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors.

Record
DEBIAN-CVE-2003-0296
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
evolution
Debian:12
before 1.3.2
1.3.2
evolution
Debian:13
before 1.3.2
1.3.2
evolution
Debian:14
before 1.3.2
1.3.2

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

MoveEnter Open