CVE-2003-0130

The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

10.33% chance of exploitation in the next 30 days, 95th percentile

Published

2003-03-21

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/22371

References

• CVE Record
• NVD entry

Related

• CVE-2003-0129
• CVE-2003-0132
• CVE-2003-0128
• CVE-2003-0143
• CVE-2003-0127
• CVE-2003-0144