Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations.
References
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2007-03-07 12:19
Updated : 2018-10-16 09:29
NVD link : CVE-2006-7139
Mitre link : CVE-2006-7139
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
kde
- k-mail
- kde