Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The handle_image function in mail-format.c for Ximian Evolution Mail User Agent 1.2.2 and earlier does not properly escape HTML characters, which allows remote attackers to inject arbitrary data and HTML via a MIME Content-ID header in a MIME-encoded image.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ximian Evolution MIME image/* Content-Type数据包含漏洞
Vulnerability Description
Ximian Evolution是个人和工作组信息管理解决方案，可使用在Linux和Unix操作系统下，集成Email、日历、会议安排、联系人管理等。 Ximian Evolution不正确验证MIME image/* Content-Type字段，远程攻击者可以利用这个漏洞绕过部分安全策略，或处理外部Content-Type类型。 如果EMAIL信息包含image/* Content-Type字段，任何数据可以嵌入到图象信息中，这可以导致嵌入任何HTML标记，使GTKHtml处理，或调用bonobo组件
CVSS Information
N/A
Vulnerability Type
N/A