Secunia Research has discovered a vulnerability in Evolution, which can be exploited by malicious people to potentially compromise a vulnerable system. A format string error in the “write_html()” function in calendar/gui/ e-cal-component-memo-preview.c when displaying a memo’s categories can potentially be exploited to execute arbitrary code via a specially crafted shared memo containing format specifiers. Evolution version 2.8.2.1 is affected. Other versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/55300/secunia-evolution.txt
Source: https://packetstormsecurity.com/files/55300/secunia-evolution.txt.html