Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: [Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS
From: Vidar Løkken <vidarlo () vestdata no>
Date: Sun, 15 Oct 2006 03:43:08 +0200 (CEST)

On Sat, 14 Oct 2006, nnp wrote:

Background:
Kmail is a HTML compatible email client that comes installed by
default with the KDE desktop. This DOS requires HTML parsing to be
enabled. This can be done in Kmail by going to  Settings -> Configure
Kmail ->Security -> and tick Prefer HTML to Plain Text.


There is a reason HTML is disabled by default, and you explicit have to enable it, and they say it might be dangerous. So it is not a serious issue IMHO, but should neverthless be fixed.

--
MVH,
Vidar
May your Tongue stick to the Roof of your Mouth with the Force of a
Thousand Caramels.


  By Date           By Thread  

Current thread:
  • Re: [Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS Vidar Løkken (Oct 16)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault