6 matches found
ViewerPrivate::deleteAttachment Function Information Disclosure
The vulnerability of the ViewerPrivate::deleteAttachment function in the messageviewer/src/viewer/viewerp.cpp component, a messaging display tool from Messagelib, is related to improper handling of the deletion of message attachments. Exploiting this vulnerability could allow an attacker who...
CVE-2021-31855
KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...
CVE-2021-31855
KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...
CVE-2021-31855
KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...
CVE-2021-31855: Cleartext Storage of Sensitive Information
KDE Messagelib through 5.17.0 reveals cleartext of encrypted messages in some situations. Deleting an attachment of a decrypted encrypted message stored on a remote server e.g., an IMAP server causes KMail to upload the decrypted content of the message to the remote server. With a crafted message...
PT-2021-4102
Name of the Vulnerable Software and Affected Versions KDE Messagelib versions prior to 5.17.0 Description The issue is related to the incorrect handling of attachment deletion in decrypted encrypted messages stored on remote servers, such as IMAP servers. When a user deletes an attachment from a...