Back to Database
Status published
Medium
CVE-2003-0130
The handle_image function in mail-format.c for Ximian Evolution Mail User...
Vulnerability Description
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2003-0130
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.gentoo.org/security/en/glsa/glsa-200303-18.xml
- http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:045
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A111
- http://www.securityfocus.com/bid/7119
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0141.html
- http://marc.info/?l=bugtraq&m=104826470527308&w=2
- http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000648
- http://www.redhat.com/support/errata/RHSA-2003-108.html
More from ximian
View All →CVE-2005-0806
Evolution 2.0.3 allows remote attackers to cause a denial of...
Medium
5
CVE-2003-0296
The IMAP Client for Evolution 1.2.4 allows remote malicious IMAP...
High
7.5
CVE-2003-0129
Ximian Evolution Mail User Agent 1.2.2 and earlier allows remote...
Medium
5
CVE-2003-0128
The try_uudecoding function in mail-format.c for Ximian Evolution Mail User...
Medium
5
CVE-2002-1765
Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a...
Medium
5
Affected Vendor
ximian
View all reports →Affected Software
evolution
Vulnerable Versions:
1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.1.1, 1.2, 1.2.1, 1.2.2
Timeline
Official Publish:
March 21st, 2003
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.