CVE-2006-7139
7 High
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
0.032 Low
EPSS
Percentile
91.1%
Kmail 1.9.1 on KDE 3.5.2, with “Prefer HTML to Plain Text” enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kde:k-mail | kde k-mail | eq | 1.9.1 |
References
archives.neohapsis.com/archives/fulldisclosure/2006-10/0293.html
secunia.com/advisories/24889
securityreason.com/securityalert/2347
www.novell.com/linux/security/advisories/2007_6_sr.html
www.securityfocus.com/archive/1/448766/100/0/threaded
www.securityfocus.com/archive/1/448768/100/0/threaded
www.securityfocus.com/bid/20539
exchange.xforce.ibmcloud.com/vulnerabilities/29557
Related
7 High
AI Score
Confidence
High
2.6 Low
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:N/A:P
0.032 Low
EPSS
Percentile
91.1%