USN-733-1 -- evolution-data-server vulnerability
|ID: oval:org.secpod.oval:def:700462||Date: (C)2011-05-13 (M)2017-10-04|
|Class: PATCH||Family: unix|
It was discovered that the Base64 encoding functions in evolution-data-server did not properly handle large strings. If a user were tricked into opening a specially crafted image file, or tricked into connecting to a malicious server, an attacker could possibly execute arbitrary code with user privileges.