2.6

CVE-2006-7139

Exploit
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kde ≫ K-mail Version1.9.1
   Kde ≫ Kde Version3.5.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.03% 0.858
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/24889
Vendor Advisory
http://www.novell.com/linux/security/advisories/2007_6_sr.html
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0293.html
Exploit
http://securityreason.com/securityalert/2347
http://www.securityfocus.com/archive/1/448766/100/0/threaded
http://www.securityfocus.com/archive/1/448768/100/0/threaded
http://www.securityfocus.com/bid/20539
https://exchange.xforce.ibmcloud.com/vulnerabilities/29557