<<< Date Index >>>     <<< Thread Index >>>

Re: [Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS

On Sat, 14 Oct 2006, nnp wrote:

Kmail is a HTML compatible email client that comes installed by
default with the KDE desktop. This DOS requires HTML parsing to be
enabled. This can be done in Kmail by going to  Settings -> Configure
Kmail ->Security -> and tick Prefer HTML to Plain Text.

There is a reason HTML is disabled by default, and you explicit have to enable it, and they say it might be dangerous. So it is not a serious issue IMHO, but should neverthless be fixed.

May your Tongue stick to the Roof of your Mouth with the Force of a
Thousand Caramels.