PT-2005-1467 · Kde · Kmail

Noam Rathaus · Published 2005-04-13 · Updated 2008-09-05 · CVE-2005-0404

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions KMail version 1.7.1

Description The issue allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email.

Recommendations For KMail version 1.7.1, consider avoiding the use of HTML formatted emails until a fix is available. As a temporary workaround, restrict the interpretation of HTML emails to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-0404

Affected Products

Kmail

References · 6

• 🔥 http://bugs.kde.org/show_bug.cgi?id=96020 · Exploit
• 🔥 https://exploit-db.com/exploits/25375 · Exploit
• 🔥 http://securiteam.com/unixfocus/5GP0B0AFFE.html · Exploit
• http://mail.kde.org/pipermail/kmail-devel/2005-February/015490.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-0404 · Security Note
• http://secunia.com/advisories/14925 · Vendor Advisory