VDB
CVE-2009-0547
CVE-2009-0547
PUBLISHED
CVSS 5 MEDIUM
Evolution 2.22.3.1 checks S/MIME signatures against a copy of the e-mail text within a signed-data blob, not the copy of the e-mail text displayed to the user, which allows remote attackers to spoof a signature by modifying the latter copy, a different vulnerability than CVE-2008-5077.
EPSS 4.25% · 89.0th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
4.25%
89.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| evolution | evolution | 2.22.3.1 |
Timeline
- Feb 12, 2009 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- 35357 third-party-advisory
- 33720 vdb
- ADV-2010-1107 vdb
- FEDORA-2009-2792 vendor-advisory
- SUSE-SR:2010:011 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=484925 url
- 34339 third-party-advisory
- [oss-security] 20090210 CVE Request -- evolution mailing-list
- 34363 third-party-advisory
- RHSA-2009:0355 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=508479 url
- SUSE-SR:2010:006 vendor-advisory
- http://bugzilla.gnome.org/show_bug.cgi?id=564465 url
- DSA-1813 vendor-advisory
- SUSE-SR:2010:012 vendor-advisory
- RHSA-2009:0354 vendor-advisory
- oval:org.mitre.oval:def:9619 vdb
- 34338 third-party-advisory
- FEDORA-2009-2784 vendor-advisory
- MDVSA-2009:078 vendor-advisory
…and 3 more