Approved changes feed: RSS · Atom

cpe:2.3:a:ximian:evolution:1.0.3:*:*:*:*:*:*:*

part: a version: 1.0.3 update: *

VendorXimian (4a943cec-a0b2-5c03-b5e2-9e61cc949bda)
ProductEvolution (c3793cf6-e610-5ba7-9f46-b58f580d1244)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/evolution purl2cpe 2026-06-01 10:16:11.865375
pkg:deb/ubuntu/evolution purl2cpe 2026-06-01 10:16:11.865378
pkg:github/gnome/evolution purl2cpe 2026-06-01 10:16:11.865382
pkg:gitlab/redhat/evolution purl2cpe 2026-06-01 10:16:11.865384
pkg:rpm/fedora/evolution purl2cpe 2026-06-01 10:16:11.865387
pkg:rpm/opensuse/evolution purl2cpe 2026-06-01 10:16:11.865390

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0130 vulnerable 2026-06-08 04:47:20.751988 Details available
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.
Published: 2003-03-21T05:00:00.000Z
Updated: 2024-08-08T01:43:35.942Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0129 vulnerable 2026-06-08 04:47:20.751400 Details available
Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (memory consumption) via a mail message that is uuencoded multiple times.
Published: 2003-03-21T05:00:00.000Z
Updated: 2024-08-08T01:43:35.943Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0128 vulnerable 2026-06-08 04:47:20.745534 Details available
The try_uudecoding function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a malicious uuencoded (UUE) header, possibly triggering a heap-based buffer overflow.
Published: 2003-03-21T05:00:00.000Z
Updated: 2024-08-08T01:43:35.780Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1765 vulnerable 2026-06-08 04:47:18.067288 Details available
Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header.
Published: 2005-06-21T04:00:00.000Z
Updated: 2024-08-08T03:34:56.323Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1471 vulnerable 2026-06-08 04:46:23.807239 Details available
The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T03:26:28.673Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.