oss-sec mailing list archives
CVE Assignment - evolution CVE-2011-3201
From: Josh Bressers <bressers () redhat com>
Date: Fri, 26 Aug 2011 10:47:03 -0400 (EDT)
Matt McCutchen reported a flaw in the way handles mailto: urls. A malicious site can specify an attach= parameter to the URL, which can attach arbitrary files to a mail message. I've assigned CVE-2011-3201 to the issue. Our bug contains what we currently know: https://bugzilla.redhat.com/show_bug.cgi?id=733504 Thanks. -- JB
Current thread:
- CVE Assignment - evolution CVE-2011-3201 Josh Bressers (Aug 26)