mailing list archives
Re: Kmail <= 1.9.1 (table/frameset) DOS
From: Vidar Løkken <vidarlo () vestdata no>
Date: Sun, 15 Oct 2006 03:43:08 +0200 (CEST)
On Sat, 14 Oct 2006, nnp wrote:
Kmail is a HTML compatible email client that comes installed by
default with the KDE desktop. This DOS requires HTML parsing to be
enabled. This can be done in Kmail by going to Settings -> Configure
Kmail ->Security -> and tick Prefer HTML to Plain Text.
There is a reason HTML is disabled by default, and you explicit have to
enable it, and they say it might be dangerous. So it is not a serious
issue IMHO, but should neverthless be fixed.
May your Tongue stick to the Roof of your Mouth with the Force of a
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/