CVE-2005-2550
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a...
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
Exploit likelihood
What each source reports
NVD Score used
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
- Record
CVE-2005-2550- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
- Record
CVE-2005-2550- Updated
- 2026-11-02
EUVDEUVD-2005-2551No score
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
- Record
EUVD-2005-2551- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m9j9-chcx-7492No score
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a...
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
- Record
GHSA-m9j9-chcx-7492- Updated
- 2026-11-02
OSVNo score
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
- Record
CVE-2005-2550- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-2550No score
Format string vulnerability in Evolution 1.4 through 2.3.6.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via the calendar entries such as task lists, which are not properly handled when the user selects the Calendars tab.
- Record
DEBIAN-CVE-2005-2550- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
evolutionDebian:12 | before 2.2.3-3 | 2.2.3-3 |
evolutionDebian:13 | before 2.2.3-3 | 2.2.3-3 |
evolutionDebian:14 | before 2.2.3-3 | 2.2.3-3 |
evolutionDebian:3.0 From an advisory covering 2 CVEs | before 1.0.5-1woody3, plus listed versions 1.0.5-11.0.5-1woody2 | 1.0.5-1woody3 |
evolutionDebian:3.1 From an advisory covering 2 CVEs | before 2.0.4-2sarge1, plus listed versions 2.0.4-2 | 2.0.4-2sarge1 |
evolutionDebian:4.0 From an advisory covering 2 CVEs | before 2.2.3-2etch1 | 2.2.3-2etch1 |
evolutionRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolution-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolution-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolutionRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
Show 20 moreShow less
| Package | Affected | Fixed |
|---|---|---|
evolution-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolution-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolutionRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolution-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolution-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolutionRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolution-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolution-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 0:1.4.5-16 | 0:1.4.5-16 |
evolutionRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolution-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolution-develRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolutionRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolution-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolution-develRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolutionRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolution-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolution-develRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolutionRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolution-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
evolution-develRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:2.0.2-16.3 | 0:2.0.2-16.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-2550 is a high vulnerability (CVSS 7.5) in Gnome Evolution, published August 12, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.43%, the 91st percentile. Fixed in evolution 2.2.3-3.
References
novell.com/linux/security/advisories/2005_54_evolution.html
securityfocus.com/bid/14532
redhat.com/support/errata/RHSA-2005-267.html
secunia.com/advisories/19380
debian.org/security/2006/dsa-1016
Show 22 moreShow less
mandriva.com/security/advisories?name=MDKSA-2005:141
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10880
sitic.se/eng/advisories_and_recommendations/sa05-001.html
marc.info?l=full-disclosure&m=112368237712032&w=2
usn.ubuntu.com/166-1
nvd.nist.gov/vuln/detail/CVE-2005-2550
github.com/advisories/GHSA-m9j9-chcx-7492
security-tracker.debian.org/tracker/CVE-2005-2550
access.redhat.com/errata/RHSA-2005:267
bugzilla.redhat.com/show_bug.cgi?id=165235
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_267.json
cve.org/CVERecord?id=CVE-2005-2549