MDVA-2008:038 : kdepim

When pasting cells from OpenOffice.org to KMail, on Mandriva Linux 2008.0, KMail would crash. This update corrects the issue. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Securit...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : kdepim vulnerability (USN-725-1)

It was discovered that Kmail did not adequately prevent execution of arbitrary code when a user clicked on a URL to an executable within an HTML mail. If a user clicked on a malicious URL and chose to execute the file, a remote attacker could execute arbitrary code with user privileges. This upda...

openSUSE 10 Security Update : kdepim3 (kdepim3-6162)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-6162. The text description of this plugin is C SUSE...

Mandriva Update for kdepim MDVA-2008:038 (kdepim)

Check for the Version of kdepim OpenVAS Vulnerability Test Mandriva Update for kdepim MDVA-2008:038 kdepim Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Mandriva Update for kdepim MDVA-2008:038 (kdepim)

Check for the Version of kdepim OpenVAS Vulnerability Test Mandriva Update for kdepim MDVA-2008:038 kdepim Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Fedora Update for kdepim FEDORA-2007-2985

Check for the Version of kdepim OpenVAS Vulnerability Test Fedora Update for kdepim FEDORA-2007-2985 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

USN-725-1: KMail vulnerability

It was discovered that Kmail did not adequately prevent execution of arbitrary code when a user clicked on a URL to an executable within an HTML mail. If a user clicked on a malicious URL and chose to execute the file, a remote attacker could execute arbitrary code with user privileges. This upda...

CVE-2007-1265

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without...

Kmail CGI authentication bypass vulnerability

Overview Kmail CGI is a web mail system for cellular phones. Kmail CGI contains a user authentication bypass vulnerability. Impact A remote attacker may bypass Kmail CGI's user authentication, and view or delete the emails of Kmail users. Solution None...

CVE-2006-7139

Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service crash via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations...

CVE-2006-7139

Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service crash via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations...

CVE-2006-7139

Affected software: Kmail 1.9.1 on KDE 3.5.2. Vulnerability: when “Prefer HTML to Plain Text” is enabled, certain HTML e-mails containing specific table and frameset tags can trigger a segmentation fault, allowing remote attackers to cause a denial of service (crash). Root cause: not explicitly de...

CVE-2006-7139

Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service crash via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations...

CVE-2006-7139

Removed by vendor...

CVE-2007-1265

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without...

Design/Logic Flaw

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without...

CVE-2007-1265

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without...

CVE-2007-1265

CVE-2007-1265 corresponds to KMail 1.9.5 and earlier failing to use GnuPG --status-fd, preventing correct visual distinction between signed and unsigned parts of multi‑component OpenPGP messages and enabling message forgery without detection. Public sources (NVD, SUSE, Ubuntu) describe the issue ...

CVE-2007-1265

Removed by vendor...

CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ GnuPG and GnuPG clients unsigned data injection vulnerability Date Published: 2007-03-05 Last Update: 2007-03-05 Advisory ID: CORE-2007-0115 Bugtraq IDs: BID 22757 -...