Mandriva Linux Security Advisory – A format string error in the “write_html()” function in calendar/gui/ e-cal-component-memo-preview.c when displaying a memo’s categories can potentially be exploited to execute arbitrary code via a specially crafted shared memo containing format specifiers.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/55433/MDKSA-2007-070.txt
Source: https://packetstormsecurity.com/files/55433/Mandriva-Linux-Security-Advisory-2007.070.html