CVE-2011-3201

GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.

• CWE-200

• http://rhn.redhat.com/errata/RHSA-2013-0516.htmlThird Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlThird Party Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=657374Issue Tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=733504Issue Tracking, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82450
• https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56Patch, Vendor Advisory
• https://git.gnome.org/browse/evolution/commit/?id=588c410718068388f8ce0004a71c104a4c89cce3Patch, Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2013-0516.htmlThird Party Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.htmlThird Party Advisory
• https://bugzilla.gnome.org/show_bug.cgi?id=657374Issue Tracking
• https://bugzilla.redhat.com/show_bug.cgi?id=733504Issue Tracking, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/82450
• https://git.gnome.org/browse/evolution/commit/?id=0a478083fa31aec0059bc6feacc054226fe55b56Patch, Vendor Advisory
• https://git.gnome.org/browse/evolution/commit/?id=588c410718068388f8ce0004a71c104a4c89cce3Patch, Vendor Advisory

Published

Mar 8, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-3195shared/inc/sql/lists.php in Domain Technologie Control (DTC)…
• CVE-2011-3196The setup script in Domain Technologie Control (DTC) before …
• CVE-2011-3197SQL injection vulnerability in Domain Technologie Control (D…
• CVE-2011-3198Domain Technologie Control (DTC) before 0.34.1 includes a pa…
• CVE-2011-3199Multiple cross-site scripting (XSS) vulnerabilities in Domai…
• CVE-2011-3200Stack-based buffer overflow in the parseLegacySyslogMsg func…
• CVE-2011-3202A Cross-Site Scripting (XSS) vulnerability exists in the g p…6.1
• CVE-2011-3203A Code Execution vulnerability exists the attachment paramet…9.8
• CVE-2011-3204hammerhead.cc in Hammerhead 2.1.4 allows local users to writ…
• CVE-2011-3205Buffer overflow in the gopherToHTML function in gopher.cc in…
• CVE-2011-3206Multiple cross-site scripting (XSS) vulnerabilities in the a…
• CVE-2011-3207crypto/x509/x509_vfy.c in OpenSSL 1.0.x before 1.0.0e does n…