Mandriva Linux Security Advisory : evolution (MDVSA-2008:063)
Medium Nessus Plugin ID 36634
SynopsisThe remote Mandriva Linux host is missing one or more security updates.
DescriptionUlf Harnhammar of Secunia Research discovered a format string flaw in how Evolution displayed encrypted mail content. If a user were to open a carefully crafted email message, arbitrary code could be executed with the permissions of the user running Evolution.
The updated packages have been patched to correct this issue.
SolutionUpdate the affected packages.