GtkHTML, as included in Evolution before 1.2.4, allows remote attackers to cause a denial of service (crash) via certain malformed messages.
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A138
https://euvd.enisa.europa.eu/vulnerability/EUVD-2003-0129
http://www.redhat.com/support/errata/RHSA-2003-126.html
http://www.mandriva.com/security/advisories?name=MDKSA-2003:046
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000737