Unrated severityNVD Advisory· Published Jun 4, 2008· Updated Jun 16, 2026
CVE-2008-1109
CVE-2008-1109
Description
Heap-based buffer overflow in Evolution 2.22.1 allows user-assisted remote attackers to execute arbitrary code via a long DESCRIPTION property in an iCalendar attachment, which is not properly handled during a reply in the calendar view (aka the Calendars window).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:gnome:evolution:2.22.1:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
21- secunia.com/advisories/30298nvdVendor Advisory
- secunia.com/secunia_research/2008-23/advisory/nvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2008-06/msg00003.htmlnvd
- secunia.com/advisories/30527nvd
- secunia.com/advisories/30564nvd
- secunia.com/advisories/30571nvd
- secunia.com/advisories/30702nvd
- secunia.com/advisories/30716nvd
- security.gentoo.org/glsa/glsa-200806-06.xmlnvd
- www.mandriva.com/security/advisoriesnvd
- www.redhat.com/support/errata/RHSA-2008-0514.htmlnvd
- www.redhat.com/support/errata/RHSA-2008-0515.htmlnvd
- www.securityfocus.com/bid/29527nvd
- www.securitytracker.com/idnvd
- www.ubuntu.com/usn/usn-615-1nvd
- www.vupen.com/english/advisories/2008/1732/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42826nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10337nvd
- www.redhat.com/archives/fedora-package-announce/2008-June/msg00157.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2008-June/msg00178.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2008-June/msg00179.htmlnvd
News mentions
0No linked articles in our index yet.