VDB
CVE-2009-0547
CVE-2009-0547
PUBLISHED
CVSS 5 MEDIUM
Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077.
EPSS 2.22% · 82.1th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
2.22%
82.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| evolution | evolution | 2.22.3.1 |
Timeline
- Feb 12, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
- Oct 29, 2022 EPSS Score
- Dec 21, 2022 EPSS Score
- Feb 12, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 29, 2023 EPSS Score
- Jul 21, 2023 EPSS Score
- Sep 13, 2023 EPSS Score
References
- 35357 third-party-advisory
- ADV-2010-1107 vdb
- FEDORA-2009-2792 vendor-advisory
- SUSE-SR:2010:011 vendor-advisory
- [oss-security] 20090210 CVE Request -- evolution mailing-list
- 34363 third-party-advisory
- RHSA-2009:0355 vendor-advisory
- http://bugzilla.gnome.org/show_bug.cgi?id=564465 url
- DSA-1813 vendor-advisory
- SUSE-SR:2010:012 vendor-advisory
- MDVSA-2009:078 vendor-advisory
- 38915 third-party-advisory
- 33720 vdb
- https://bugzilla.redhat.com/show_bug.cgi?id=484925 url
- 34339 third-party-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479 url
- SUSE-SR:2010:006 vendor-advisory
- RHSA-2009:0354 vendor-advisory
- oval:org.mitre.oval:def:9619 vdb
- 34338 third-party-advisory
…and 3 more