GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2013-03-08 21:55
Updated : 2025-04-11 00:51
NVD link : CVE-2011-3201
Mitre link : CVE-2011-3201
CVE.ORG link : CVE-2011-3201
JSON object : View
Products Affected
redhat
- enterprise_linux_workstation
- enterprise_linux_desktop
- enterprise_linux_server
oracle
- solaris
gnome
- evolution
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor