CVE-2006-0528

The cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

11.01% chance of exploitation in the next 30 days, 96th percentile

Published

2006-02-02

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27145

References

• CVE Record
• NVD entry

Related

• CVE-2006-0524
• CVE-2006-0532
• CVE-2006-0522
• CVE-2006-0534
• CVE-2006-0520
• CVE-2006-0537