313 matches found
KMail DoS
Crash on HTML parsing...
[Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= SilentHack.co.uk Vulnerability Research =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Background: Kmail is a HTML compatible email client that comes installed by default with the KDE desktop. This DOS requires...
JVN#41241092 Kmail CGI authentication bypass vulnerability
Impact A remote attacker may bypass Kmail CGI's user authentication, and view or delete the emails of Kmail users. Solution Products Affected Version 1.0.3 and earlier...
Kmail 1.9.1 - IMG SRC Remote Denial of Service
Kmail 1.9.1 - IMG SRC Remote Denial of Service nnp at silenthack.co.uk http://silenthack.co.uk Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into your local...
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
No description provided by source. nnp at silenthack.co.uk http://silenthack.co.uk Kmail = 1.9.1 latest suffers from a crash when trying to parse an incorrectly formatted img tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick...
Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability
Exploit for multiple platform in category dos / poc =============================================================== Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into you...
Kmail 1.9.1 - IMG SRC Remote Denial of Service
nnp at silenthack.co.uk http://silenthack.co.uk Kmail tag. HTML parsing must be enabled for this. This can be done by going to Settings - Configure Kmail -Security - and tick Prefer HTML to Plain Text. Copy the following into your local /var/spool/mail/whoami or send a mail containing the HTML pa...
[Full-disclosure] Kmail <= 1.9.1 (latest) DOS
Found this while fuzzing for a different type of vuln. For the life of me I cant do anything useful with this bug so here it is. I dont have the time to narrow down what causes the crash, if anyone manages to get code execution from it, be a dear and let me know ; I am using KDE 3.5.2 and kmail...
CVE-2006-2104
The CVE covers multiple reflected cross-site scripting (XSS) flaws in Kamgaing Email System (kmail) version 2.3 and earlier. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML by manipulating specific parameters: d and (1) main.php, ordner and (2) main.php, (3) webd...
Kmail <=2.3 vuln.
Kmail =2.3 vuln. Vulnerability discovered by : r0t Date: 28 april 2006 vendorlink:www.webofall.com/displaynews.php?id=4 affected versions:2.3 and prior orginal advisory:http://pridels.blogspot.com/2006/04/kmail-23-vuln.html Vuln. Description: 1. Multiple Cross-Site Scripting attack vulnerabilitie...
CVE-2005-0404
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...
CVE-2005-0404
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...
CVE-2005-0404
KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email...
CVE-2005-0404
CVE-2005-0404 describes a vulnerability in KDE’s KMail 1.7.1 (KDE 3.3.2) where HTML-formatted emails can spoof visible email metadata (e.g., signing/encryption indicators). The root cause is how KMail handles HTML content, enabling an attacker to overlay content to misrepresent the email’s origin...
CVE-2005-0404
Removed by vendor...
KDE KMail HTML Email Information Spoofing
Binary data 2811.prm...
[UNIX] Kmail HTML Support Allows Spoofing of Emails' Content
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
KMail mail agent signed content spoofing
Invalid HTML part handling allows to spoof signed text...
KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing
KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing source: https://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may...
KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing
source: https://www.securityfocus.com/bid/13085/info A remote email message content spoofing vulnerability affects KDE KMail. This issue is due to a failure of the application to properly sanitize HTML email messages. An attacker may leverage this issue to spoof email content and various header...