CVE-2020-15954

Mô tả

Tham khảo

• bugs.kde.org/show_bug.cgi · Vendor Advisory
• lists.debian.org/debian-lts-announce/2020/07/msg00030.html · Third Party Advisory

Lỗ hổng khác của kmail

• CVE-2021-38373TRUNG BÌNH 5.3In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option is not honored (and cleartext messages are sent) unless "Server requires authent…
• CVE-2020-11880TRUNG BÌNH 6.5An issue was discovered in KDE KMail before 19.12.3. By using the proprietary (non-RFC6068) "mailto?attach=..." parameter, a website (or oth…
• CVE-2019-10732TRUNG BÌNH 4.3In KDE KMail 5.2.3, an attacker in possession of S/MIME or PGP encrypted emails can wrap them as sub-parts within a crafted multipart email.…
• CVE-2014-8878TRUNG BÌNH 5.9KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive i…
• CVE-2017-9604CAO 7.5KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/en…