CVE

Id
94786  
CVE No.
CVE-2016-7966  
Status
Candidate  
Description
Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail"s plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
797539 94786 CVE-2016-7966 MLIST:[oss-security] 20161004 Re: KMail vulnerabilites: need 3 CVE  View
797540 94786 CVE-2016-7966 URL:http://www.openwall.com/lists/oss-security/2016/10/05/1  View
797541 94786 CVE-2016-7966 DEBIAN:DSA-3697  View
797542 94786 CVE-2016-7966 URL:http://www.debian.org/security/2016/dsa-3697  View
797543 94786 CVE-2016-7966 FEDORA:FEDORA-2016-92c112a380  View
797544 94786 CVE-2016-7966 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/QNMM5TVPTJQFPJ3YDF4DPXDFW3GQLWLY/  View
797545 94786 CVE-2016-7966 SUSE:openSUSE-SU-2016:2559  View
797546 94786 CVE-2016-7966 URL:http://lists.opensuse.org/opensuse-updates/2016-10/msg00065.html  View
797547 94786 CVE-2016-7966 BID:93360  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4273 JVNDB-2016-005046 複数の Huawei スマートフォンのソフトウェアのビデオドライバにおけるサービス運用妨害 (DoS) の脆弱性 Huawei Mate S、P8、および Honor 6、Honor 6 Plus スマートフォンのソフトウェアのビデオドライバには、サービス運用妨害 (デバイスのリブート) 状態にされる脆弱性が存在します。 CVE-2016-8279 94786 7.1 5.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005046.html  View