Re: Kmail <= 1.9.1 (table/frameset) DOS

[Vidar Løkken <vidarlo () vestdata no>]

On Sat, 14 Oct 2006, nnp wrote:

> Background:
> Kmail is a HTML compatible email client that comes installed by
> default with the KDE desktop. This DOS requires HTML parsing to be
> enabled. This can be done in Kmail by going to  Settings -> Configure
> Kmail ->Security -> and tick Prefer HTML to Plain Text.

There is a reason HTML is disabled by default, and you explicit have to 
enable it, and they say it might be dangerous. So it is not a serious 
issue IMHO, but should neverthless be fixed.

-- 
MVH,
Vidar
May your Tongue stick to the Roof of your Mouth with the Force of a
Thousand Caramels.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/