Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-fh7r-rv78-pkcd
SummaryThe cairo library (libcairo), as used in GNOME Evolution and possibly other products, allows remote attackers to cause a denial of service (persistent client crash) via an attached text file that contains "Content-Disposition: inline" in the header, and a very long line in the body, which causes the client to repeatedly crash until the e-mail message is manually removed, possibly due to a buffer overflow, as demonstrated using an XML attachment.
Aliases
0
alias CVE-2006-0528
Fixed_packages
0
url pkg:deb/debian/evolution@2.2.3-4?distro=trixie
purl pkg:deb/debian/evolution@2.2.3-4?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/evolution@2.2.3-4%3Fdistro=trixie
1
url pkg:deb/debian/evolution@2.6.3-6
purl pkg:deb/debian/evolution@2.6.3-6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgt-ev1b-vqey
1
vulnerability VCID-27dq-4ygw-ebhe
2
vulnerability VCID-3ja7-4cwn-cbfr
3
vulnerability VCID-67d5-ftaf-8yhj
4
vulnerability VCID-7kpt-g36p-7ycv
5
vulnerability VCID-7pcu-prtr-bqhg
6
vulnerability VCID-9du9-wsr8-d7ay
7
vulnerability VCID-f121-myv6-6ua1
8
vulnerability VCID-kp8e-yu4x-2ygc
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/evolution@2.6.3-6
2
url pkg:deb/debian/evolution@3.38.3-1%2Bdeb11u2?distro=trixie
purl pkg:deb/debian/evolution@3.38.3-1%2Bdeb11u2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/evolution@3.38.3-1%252Bdeb11u2%3Fdistro=trixie
3
url pkg:deb/debian/evolution@3.46.4-2%2Bdeb12u1?distro=trixie
purl pkg:deb/debian/evolution@3.46.4-2%2Bdeb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/evolution@3.46.4-2%252Bdeb12u1%3Fdistro=trixie
4
url pkg:deb/debian/evolution@3.56.2-0%2Bdeb13u1?distro=trixie
purl pkg:deb/debian/evolution@3.56.2-0%2Bdeb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/evolution@3.56.2-0%252Bdeb13u1%3Fdistro=trixie
5
url pkg:deb/debian/evolution@3.56.2-9?distro=trixie
purl pkg:deb/debian/evolution@3.56.2-9?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/evolution@3.56.2-9%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/evolution@1.0.5-1woody2
purl pkg:deb/debian/evolution@1.0.5-1woody2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffq-e994-bka9
1
vulnerability VCID-1kgt-ev1b-vqey
2
vulnerability VCID-1pms-gy8w-pbhu
3
vulnerability VCID-27dq-4ygw-ebhe
4
vulnerability VCID-3ja7-4cwn-cbfr
5
vulnerability VCID-5r5s-q64u-jyet
6
vulnerability VCID-67d5-ftaf-8yhj
7
vulnerability VCID-6jbu-xyh5-cyfj
8
vulnerability VCID-7kpt-g36p-7ycv
9
vulnerability VCID-7pcu-prtr-bqhg
10
vulnerability VCID-9du9-wsr8-d7ay
11
vulnerability VCID-eah3-vbhe-4bgz
12
vulnerability VCID-f121-myv6-6ua1
13
vulnerability VCID-fh7r-rv78-pkcd
14
vulnerability VCID-h4xp-q36b-87e1
15
vulnerability VCID-j255-6yat-pkew
16
vulnerability VCID-j4pn-f41d-fqd2
17
vulnerability VCID-kp8e-yu4x-2ygc
18
vulnerability VCID-n19y-rxv1-x7f7
19
vulnerability VCID-uwpv-btmf-yyas
20
vulnerability VCID-vtz9-3sep-yqhh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/evolution@1.0.5-1woody2
1
url pkg:deb/debian/evolution@2.0.4-2sarge3
purl pkg:deb/debian/evolution@2.0.4-2sarge3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ffq-e994-bka9
1
vulnerability VCID-1kgt-ev1b-vqey
2
vulnerability VCID-27dq-4ygw-ebhe
3
vulnerability VCID-3ja7-4cwn-cbfr
4
vulnerability VCID-67d5-ftaf-8yhj
5
vulnerability VCID-7kpt-g36p-7ycv
6
vulnerability VCID-7pcu-prtr-bqhg
7
vulnerability VCID-9du9-wsr8-d7ay
8
vulnerability VCID-f121-myv6-6ua1
9
vulnerability VCID-fh7r-rv78-pkcd
10
vulnerability VCID-h4xp-q36b-87e1
11
vulnerability VCID-kp8e-yu4x-2ygc
12
vulnerability VCID-vtz9-3sep-yqhh
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/evolution@2.0.4-2sarge3
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-0528
reference_id
reference_type
scores
0
value 0.05109
scoring_system epss
scoring_elements 0.90052
published_at 2026-06-11T12:55:00Z
1
value 0.05109
scoring_system epss
scoring_elements 0.90083
published_at 2026-06-12T12:55:00Z
2
value 0.05109
scoring_system epss
scoring_elements 0.90091
published_at 2026-06-13T12:55:00Z
3
value 0.05109
scoring_system epss
scoring_elements 0.90089
published_at 2026-06-14T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-0528
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0528
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-0528
2
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/27145.txt
reference_id CVE-2006-0528;OSVDB-22923
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/27145.txt
3
reference_url https://www.securityfocus.com/bid/16408/info
reference_id CVE-2006-0528;OSVDB-22923
reference_type exploit
scores
url https://www.securityfocus.com/bid/16408/info
4
reference_url https://usn.ubuntu.com/265-1/
reference_id USN-265-1
reference_type
scores
url https://usn.ubuntu.com/265-1/
Weaknesses
Exploits
0
date_added 2006-01-28
description GNOME Evolution 2.2.3/2.3.x - Inline XML File Attachment Buffer Overflow
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2006-01-28
exploit_type dos
platform linux
source_date_updated 2013-07-28
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/16408/info
Severity_range_scorenull
Exploitability2.0
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-fh7r-rv78-pkcd