CVE-2003-0130
MEDIUM 5.0EPSS 10.3%
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.
- CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N - EPSS
- 10.33% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2003-03-21
- Updated
- 2024-08-08
ExploitDB entries (1)
Security advisories
- http://www.coresecurity.com/common/showdoc.php?idx=309&idxseccion=10
- http://www.securityfocus.com/bid/7119
- http://www.mandriva.com/security/advisories?name=MDKSA-2003:045
- http://www.redhat.com/support/errata/RHSA-2003-108.html