Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Kmail <= 1.9.1 (table/frameset) DOS
From: Vidar Løkken <vidarlo () vestdata no>
Date: Sun, 15 Oct 2006 03:43:08 +0200 (CEST)

On Sat, 14 Oct 2006, nnp wrote:

Kmail is a HTML compatible email client that comes installed by
default with the KDE desktop. This DOS requires HTML parsing to be
enabled. This can be done in Kmail by going to  Settings -> Configure
Kmail ->Security -> and tick Prefer HTML to Plain Text.

There is a reason HTML is disabled by default, and you explicit have to 
enable it, and they say it might be dangerous. So it is not a serious 
issue IMHO, but should neverthless be fixed.

May your Tongue stick to the Roof of your Mouth with the Force of a
Thousand Caramels.

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]