Secunia

Three vulnerabilities have been identified in Ximian Evolution, which can be exploited by malicious people.

1) An exceptional handling error can cause a DoS (Denial of Service) on Evolution, when the program tries to parse a normal emails with a specially crafted UUE header. When the email is recieved, Evolution crashes and cannot be started again, until the malicious email has been deleted.

2) An exceptional handling error can cause a DoS on Evolution, when the program tries to process an email with content, which has been UUEncoded multiple times. This results in memory starvation and finally crashes Evolution and causes system instability.

3) An input validation error in the Content-ID header allows insertion of arbitrary data, which is then passed to GTKHtml for rendering. This can result in bypass of the "Don't connect to remote hosts to fetch images" option, execution of bonobo components with arbitrary content or corruption of the heap, which leads to a crash and might be exploitable to execute arbitrary code, though this has not been confirmed.

Solution
Update to version 1.2.3.

Provided and/or discovered by
Diego Kelyacoubian, Javier Kohen, Alberto Solino and Juan Vera.

Original Advisory
http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10

Deep Links
Links available in Customer Area