Title : Evolution iCalendar Attachment Handling Buffer Overflow Vulnerabilities VUPEN ID : VUPEN/ADV-2008-1732 CVE ID : CVE-2008-1108 - CVE-2008-1109 CWE ID : CWE-119
Rated as : High Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-06-04
Technical Description
Two vulnerabilities have been identified in Evolution, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system.
The first issue is caused by a buffer overflow error when parsing overly long timezone strings contained within iCalendar attachments while the ITip Formatter plugin is disabled, which could allow attackers to execute arbitrary code.
The second vulnerability is caused by a buffer overflow error when replying to an iCalendar request containing an overly long "DESCRIPTION" property, which could be exploited by attackers to execute arbitrary code by tricking a user into accepting and replying to a malicious iCalendar request from the "Calendars" window.
