CVE-2005-0102
CriticalSummary
Integer overflow in Evolution 2.0.2 and earlier, in the camel-lock-helper component, allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, leading to a zero byte memory allocation and a buffer overflow.
Risk Assessment
The risk for organizations includes remote code execution via a malicious POP3 server or local privilege escalation, potentially leading to system compromise and data confidentiality breaches.
Recommendation
Immediately upgrade Evolution to a version later than 2.0.2, which includes a fix for this vulnerability. Also consider restricting access to untrusted POP3 servers.
Original NVD description (English source)
Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.