What is CVE-2005-0102?

CVE-2005-0102 is a critical-severity vulnerability in GNOME Evolution, classified under Integer Overflow or Wraparound. CVSS score: 9.8/10. Published 2005-01-24.

How severe is CVE-2005-0102?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Integer overflow in GNOME Evolution

CVE-2005-0102

Integer overflow in camel-lock-helper in Evolution 2.0.2 and earlier allows local users or remote malicious POP3 servers to execute arbitrary code via a length value of -1, which leads to a zero byte memory allocation and a buffer overflow.

Vulnerability class: Integer Overflow

Published 2005-01-24 · last modified 2026-06-16.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.032 (87.6th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 88th percentile — 87.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.032 · newest: 0.032 · change: 0.000

Affected products

GNOME Evolution
Debian Linux — versions 3.0

Weakness classification (CWE)

CWE-190 — Integer Overflow or Wraparound

References

www.mandriva.com/security/advisories (vendor-advisory, Third Party Advisory)
oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:9616 (Broken Link, signature, vdb-entry)
distro.conectiva.com.br/atualizacoes/ (vendor-advisory, Patch, Broken Link, Vendor Advisory)
security.gentoo.org/glsa/glsa-200501-35.xml (vendor-advisory, Third Party Advisory)
exchange.xforce.ibmcloud.com/vulnerabilities/19031 (VDB Entry, Third Party Advisory, vdb-entry)
securitytracker.com/id (VDB Entry, Third Party Advisory, vdb-entry, Broken Link)
usn.ubuntu.com/69-1/ (vendor-advisory, Broken Link)
www.securityfocus.com/bid/12354 (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, Vendor Advisory)
www.redhat.com/support/errata/RHSA-2005-238.html (vendor-advisory, Broken Link)
www.debian.org/security/2005/dsa-673 (vendor-advisory, Patch, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2005-0102?: CVE-2005-0102 is a critical-severity vulnerability in GNOME Evolution, classified under Integer Overflow or Wraparound. CVSS score: 9.8/10. Published 2005-01-24.
How severe is CVE-2005-0102?: Critical severity. CVSS v3 base score is 9.8 out of 10.