Every CVESearch/Get API key

CVE-2008-0072

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in...

6.8 MediumFix available

CVE-2008-0072 is a medium vulnerability (CVSS 6.8) in Gnome Evolution, published March 5, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.02%, the 93rd percentile. Fixed in evolution 2.12.3-1.1.

What does this mean?
Severity
6.8 MediumCVSS 2.0, NVD
Exploit chance
6.02%EPSS, 93rd percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
2.12.3-1.1evolution +42 more

Description

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Exploit likelihood

6.02%Down 3.9 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
evolution
Debian:12
before 2.12.3-1.1
2.12.3-1.1
evolution
Debian:13
before 2.12.3-1.1
2.12.3-1.1
evolution
Debian:14
before 2.12.3-1.1
2.12.3-1.1
evolution
Debian:3.1
before 2.0.4-2sarge3, plus listed versions
2.0.4-22.0.4-2sarge12.0.4-2sarge2
2.0.4-2sarge3
evolution
Debian:4.0
before 2.6.3-6etch2, plus listed versions
2.6.3-62.6.3-6etch1
2.6.3-6etch2
evolution
Red Hat:enterprise_linux:4::as
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution-debuginfo
Red Hat:enterprise_linux:4::as
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution-devel
Red Hat:enterprise_linux:4::as
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution28
Red Hat:enterprise_linux:4::as
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution28-debuginfo
Red Hat:enterprise_linux:4::as
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
Show 33 moreShow less
Affected packages
PackageAffectedFixed
evolution28-devel
Red Hat:enterprise_linux:4::as
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution-devel
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution28
Red Hat:enterprise_linux:4::desktop
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution28-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution28-devel
Red Hat:enterprise_linux:4::desktop
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution
Red Hat:enterprise_linux:4::es
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution-debuginfo
Red Hat:enterprise_linux:4::es
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution-devel
Red Hat:enterprise_linux:4::es
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution28
Red Hat:enterprise_linux:4::es
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution28-debuginfo
Red Hat:enterprise_linux:4::es
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution28-devel
Red Hat:enterprise_linux:4::es
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution-devel
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-35.0.4.el4_6.1
0:2.0.2-35.0.4.el4_6.1
evolution28
Red Hat:enterprise_linux:4::ws
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution28-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution28-devel
Red Hat:enterprise_linux:4::ws
before 0:2.8.0-53.el4_6.2
0:2.8.0-53.el4_6.2
evolution
Red Hat:enterprise_linux:5::client_workstation
before 0:2.8.0-40.el5_1.1
0:2.8.0-40.el5_1.1
evolution-debuginfo
Red Hat:enterprise_linux:5::client_workstation
before 0:2.8.0-40.el5_1.1
0:2.8.0-40.el5_1.1
evolution-devel
Red Hat:enterprise_linux:5::client_workstation
before 0:2.8.0-40.el5_1.1
0:2.8.0-40.el5_1.1
evolution
Red Hat:enterprise_linux:5::client
before 0:2.8.0-40.el5_1.1
0:2.8.0-40.el5_1.1
evolution-debuginfo
Red Hat:enterprise_linux:5::client
before 0:2.8.0-40.el5_1.1
0:2.8.0-40.el5_1.1
evolution
Red Hat:rhel_productivity:5
before 0:2.8.0-40.el5_1.1
0:2.8.0-40.el5_1.1
evolution-debuginfo
Red Hat:rhel_productivity:5
before 0:2.8.0-40.el5_1.1
0:2.8.0-40.el5_1.1
evolution-devel
Red Hat:rhel_productivity:5
before 0:2.8.0-40.el5_1.1
0:2.8.0-40.el5_1.1
evolution
Red Hat:rhel_eus:4.5::as
before 0:2.0.2-35.0.4.el4_5.1
0:2.0.2-35.0.4.el4_5.1
evolution-debuginfo
Red Hat:rhel_eus:4.5::as
before 0:2.0.2-35.0.4.el4_5.1
0:2.0.2-35.0.4.el4_5.1
evolution-devel
Red Hat:rhel_eus:4.5::as
before 0:2.0.2-35.0.4.el4_5.1
0:2.0.2-35.0.4.el4_5.1
evolution
Red Hat:rhel_eus:4.5::es
before 0:2.0.2-35.0.4.el4_5.1
0:2.0.2-35.0.4.el4_5.1
evolution-debuginfo
Red Hat:rhel_eus:4.5::es
before 0:2.0.2-35.0.4.el4_5.1
0:2.0.2-35.0.4.el4_5.1
evolution-devel
Red Hat:rhel_eus:4.5::es
before 0:2.0.2-35.0.4.el4_5.1
0:2.0.2-35.0.4.el4_5.1

What each source reports

NVD Score used6.8

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Record
CVE-2008-0072
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-134
Updated
2026-11-02
CVE ListNo score

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Record
CVE-2008-0072
Updated
2026-11-02
EUVDEUVD-2008-0085No score

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Record
EUVD-2008-0085
Updated
2026-11-03
GitHub AdvisoriesGHSA-j468-6fhg-5w3cNo score

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in...

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Record
GHSA-j468-6fhg-5w3c
Weakness
CWE-134
Updated
2026-11-02
OSVNo score

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Record
CVE-2008-0072
Updated
2026-11-02
OSVDEBIAN-CVE-2008-0072No score

Format string vulnerability in the emf_multipart_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote attackers to execute arbitrary code via a crafted encrypted message, as demonstrated using the Version field.

Record
DEBIAN-CVE-2008-0072
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 34 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open