AOH :: HP Unsorted E :: BX3595.HTM

Evolution Vulnerability



Evolution Vulnerability
Evolution Vulnerability




Application: Evolution 2.22.2
OS: Linux - Ubuntu 8.04
------------------------------------------------------
1 - Description
2 - Vulnerability
3 - POC/EXPLOIT


------------------------------------------------------
Description

Evolution is an email client that is built with ubuntu.


------------------------------------------------------
Vulnerability


The vulnerability works when mail is sent and specially armed with html code, this causes the client to break.

Analyzing with a debugger, you can see the failure with the following function.


0xb7a219d7 in html_engine_get_view_width () from /usr/lib/libgtkhtml-3.14.so.19


------------------------------------------------------
POC/EXPLOIT


The proof of concept can be done locally,
when you save the following code in a html file and then load it into an e-mail from the new option "insert" and "html file",
as that could verify the client is broken.




------------------------------------------------------
Juan Pablo Lopez Yacubian

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.