KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network.
References
| Link | Resource |
|---|---|
| http://www.openwall.com/lists/oss-security/2015/07/16/10 | Mailing List Patch Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/75986 | Third Party Advisory VDB Entry |
| https://bugs.kde.org/show_bug.cgi?id=340312 | Issue Tracking Patch Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1243777 | Issue Tracking Patch Third Party Advisory VDB Entry |
| http://www.openwall.com/lists/oss-security/2015/07/16/10 | Mailing List Patch Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/75986 | Third Party Advisory VDB Entry |
| https://bugs.kde.org/show_bug.cgi?id=340312 | Issue Tracking Patch Vendor Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1243777 | Issue Tracking Patch Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 02:19
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.openwall.com/lists/oss-security/2015/07/16/10 - Mailing List, Patch, Third Party Advisory, VDB Entry | |
| References | () http://www.securityfocus.com/bid/75986 - Third Party Advisory, VDB Entry | |
| References | () https://bugs.kde.org/show_bug.cgi?id=340312 - Issue Tracking, Patch, Vendor Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1243777 - Issue Tracking, Patch, Third Party Advisory, VDB Entry |
Information
Published : 2017-09-28 01:29
Updated : 2024-11-21 02:19
NVD link : CVE-2014-8878
Mitre link : CVE-2014-8878
CVE.ORG link : CVE-2014-8878
JSON object : View
Products Affected
kde
- kmail
CWE
CWE-310
Cryptographic Issues