CVE-2007-1002
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo...
CVE-2007-1002 is a medium vulnerability (CVSS 6.8) in Evolution Shared Memo, published March 21, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.39%, the 88th percentile. Fixed in evolution 2.10.2-1.
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.
- Record
CVE-2007-1002- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.
- Record
CVE-2007-1002- Updated
- 2026-11-02
EUVDEUVD-2007-0999 No score
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.
- Record
EUVD-2007-0999- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h5rr-x7vv-j59h No score
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo...
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.
- Record
GHSA-h5rr-x7vv-j59h- Updated
- 2026-11-02
OSV No score
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.
- Record
CVE-2007-1002- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-1002 No score
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and possibly earlier versions, allows user-assisted remote attackers to execute arbitrary code via format specifiers in the categories of a crafted shared memo.
- Record
DEBIAN-CVE-2007-1002- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
evolutionDebian:12 |
before 2.10.2-1 | 2.10.2-1 |
evolutionDebian:13 |
before 2.10.2-1 | 2.10.2-1 |
evolutionDebian:14 |
before 2.10.2-1 | 2.10.2-1 |
evolutionDebian:3.1 |
before 2.0.4-2sarge2, plus listed versions 2.0.4-22.0.4-2sarge1 |
2.0.4-2sarge2 |
evolutionDebian:4.0 |
before 2.6.3-6etch1, plus listed versions 2.6.3-6 |
2.6.3-6etch1 |
evolutionRed Hat:enterprise_linux:5::client_workstation |
before 0:2.8.0-33.0.1.el5 | 0:2.8.0-33.0.1.el5 |
evolution-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 0:2.8.0-33.0.1.el5 | 0:2.8.0-33.0.1.el5 |
evolution-develRed Hat:enterprise_linux:5::client_workstation |
before 0:2.8.0-33.0.1.el5 | 0:2.8.0-33.0.1.el5 |
evolutionRed Hat:enterprise_linux:5::client |
before 0:2.8.0-33.0.1.el5 | 0:2.8.0-33.0.1.el5 |
evolution-debuginfoRed Hat:enterprise_linux:5::client |
before 0:2.8.0-33.0.1.el5 | 0:2.8.0-33.0.1.el5 |
evolutionRed Hat:rhel_productivity:5 |
before 0:2.8.0-33.0.1.el5 | 0:2.8.0-33.0.1.el5 |
evolution-debuginfoRed Hat:rhel_productivity:5 |
before 0:2.8.0-33.0.1.el5 | 0:2.8.0-33.0.1.el5 |
evolution-develRed Hat:rhel_productivity:5 |
before 0:2.8.0-33.0.1.el5 | 0:2.8.0-33.0.1.el5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | aliases | |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/24651
rhn.redhat.com/errata/RHSA-2007-0158.html
securitytracker.com/id?1017808
security.gentoo.org/glsa/glsa-200706-02.xml
securityfocus.com/bid/23073
Show 24 moreShow less
debian.org/security/2007/dsa-1325
exchange.xforce.ibmcloud.com/vulnerabilities/33106
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10100
ubuntu.com/usn/usn-442-1
mandriva.com/security/advisories?name=MDKSA-2007:070
vupen.com/english/advisories/2007/1058
novell.com/linux/security/advisories/2007_15_sr.html
nvd.nist.gov/vuln/detail/CVE-2007-1002
github.com/advisories/GHSA-h5rr-x7vv-j59h
security-tracker.debian.org/tracker/CVE-2007-1002
access.redhat.com/errata/RHSA-2007:0158
bugzilla.redhat.com/show_bug.cgi?id=231478
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0158.json
cve.org/CVERecord?id=CVE-2007-1002