Unscored severity · published Mar 7, 2007
CVE-2006-7139
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset…
–
CVSS
3.1%
EPSS
No
On KEV
Description
Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KM
K-mail · Kde
1.9.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-7139
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-7139
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0293.html
Vendor Advisory
http://secunia.com/advisories/24889
securityreason.com
http://securityreason.com/securityalert/2347
www.novell.com
http://www.novell.com/linux/security/advisories/2007_6_sr.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/448766/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/448768/100/0/threaded
More from K-mail
–
CVE-2007-1265
KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions…
–
CVE-2002-0342
Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long
–
CVE-1999-0735
KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories
–
CVE-2000-0481
Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name