[<prev] [next>] [day] [month] [year] [list]
Message-ID: <Pine.LNX.4.63.0610150342120.6495@elise.vidarlo.net>
Date: Sun, 15 Oct 2006 03:43:08 +0200 (CEST)
From: Vidar Løkken <vidarlo@...tdata.no>
To: nnp <version5@...il.com>
Cc: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk,
vulnwatch@...nwatch.org
Subject: Re: [Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS
On Sat, 14 Oct 2006, nnp wrote:
> Background:
> Kmail is a HTML compatible email client that comes installed by
> default with the KDE desktop. This DOS requires HTML parsing to be
> enabled. This can be done in Kmail by going to Settings -> Configure
> Kmail ->Security -> and tick Prefer HTML to Plain Text.
>
There is a reason HTML is disabled by default, and you explicit have to
enable it, and they say it might be dangerous. So it is not a serious
issue IMHO, but should neverthless be fixed.
--
MVH,
Vidar
May your Tongue stick to the Roof of your Mouth with the Force of a
Thousand Caramels.
Powered by blists - more mailing lists