CVE-2016-7966

概要

参考情報

• lists.opensuse.org/opensuse-updates/2016-10/msg00065.html · Third Party Advisory
• debian.org/security/2016/dsa-3697 · Third Party Advisory
• openwall.com/lists/oss-security/2016/10/05/1 · Third Party Advisory
• securityfocus.com/bid/93360 · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QNMM5TVPTJQFPJ3YDF4DPXDFW3GQLWLY

kmail のその他の脆弱性

• CVE-2021-38373中 5.3In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authent…
• CVE-2020-15954中 6.5KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use.
• CVE-2020-11880中 6.5An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or oth…
• CVE-2019-10732中 4.3In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email.…
• CVE-2014-8878中 5.9KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive i…