CVE-2011-3201
Fixed in a distro release EPSS 3%
GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
Products: oracle solaris, gnome evolution, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | evolution | no fix |
| Debian 13 | evolution | no fix |
| Debian 14 | evolution | no fix |
| Red Hat Enterprise Linux 6 | evolution | 0:2.28.3-30.el6 |
| Red Hat Enterprise Linux 6 | evolution-conduits | 0:2.28.3-30.el6 |
| Red Hat Enterprise Linux 6 | evolution-debuginfo | 0:2.28.3-30.el6 |
| Red Hat Enterprise Linux 6 | evolution-devel | 0:2.28.3-30.el6 |
| Red Hat Enterprise Linux 6 | evolution-help | 0:2.28.3-30.el6 |
| Red Hat Enterprise Linux 6 | evolution-perl | 0:2.28.3-30.el6 |
| Red Hat Enterprise Linux 6 | evolution-pst | 0:2.28.3-30.el6 |
| Red Hat Enterprise Linux 6 | evolution-spamassassin | 0:2.28.3-30.el6 |