|
|
| |
|
| |
kdepim: execution of arbitrary code
| Package(s): | kdepim kmail |
CVE #(s): | |
| Created: | February 27, 2009 |
Updated: | March 4, 2009 |
| Description: |
From the Ubuntu advisory: It was discovered that Kmail did not adequately
prevent execution of arbitrary code when a user clicked on a URL to an
executable within an HTML mail. If a user clicked on a malicious URL and
chose to execute the file, a remote attacker could execute arbitrary code
with user privileges. This update changes KMail's behavior to instead
launch a helper program to view the file if the user chooses to execute
such a link. |
| Alerts: |
|
( Log in to post comments)
|
|
|