CVE-2006-0528
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows...
CVE-2006-0528 is a medium vulnerability (CVSS 5.0) in Gnome Evolution, published February 2, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.0%, the 95th percentile. Fixed in evolution 2.2.3-4.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 11.0%EPSS, 95th percentile
- Exploitation
- None known1 public exploit
- Fixed in
2.2.3-4evolution +2 more
Description
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
Exploit likelihood
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | GNOME Evolution 2.2.3/2.3.x - Inline XML File Attachment Buffer Overflow | 2006-01-28 |
What each source reports
NVD Score used
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
- Record
CVE-2006-0528- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE ListNo score
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
- Record
CVE-2006-0528- Updated
- 2026-11-02
EUVDEUVD-2006-0535No score
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
- Record
EUVD-2006-0535- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4rxr-6q7p-q23gNo score
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows...
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
- Record
GHSA-4rxr-6q7p-q23g- Updated
- 2026-11-02
OSVNo score
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
- Record
CVE-2006-0528- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-0528No score
The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
- Record
DEBIAN-CVE-2006-0528- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10671-1No score
cairo-devel-1.16.0-3.14 on GA media
These are all security issues fixed in the cairo-devel-1.16.0-3.14 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10671-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.