Debian Security Advisory 1325-1 – Ulf Harnhammer discovered that a format string vulnerability in the handling of shared calendars may allow the execution of arbitrary code. It was discovered that the IMAP code in the Evolution Data Server performs insufficient sanitizing of a value later used an array index, which can lead to the execution of arbitrary code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57376/dsa-1325-1.txt
Source: https://packetstormsecurity.com/files/57376/Debian-Linux-Security-Advisory-1325-1.html