USN-3100-1: KDE-PIM Libraries vulnerability

USN-3100-1: KDE-PIM Libraries vulnerability

Ubuntu Security Notice USN-3100-1

12th October, 2016

kdepimlibs vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

  • Ubuntu 12.04 LTS

Summary

KMail could be made to run HTML if it opened a specially crafted email.

Software description

  • kdepimlibs
    – the KDE PIM libraries

Details

Roland Tapken discovered that the KDE-PIM Libraries incorrectly filtered
URLs. A remote attacker could use this issue to perform an HTML injection
attack in the KMail plain text viewer.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 12.04 LTS:
libkpimutils4

4:4.8.5-0ubuntu0.3

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to restart KMail to make all the
necessary changes.

References

CVE-2016-7966

Source: USN-3100-1: KDE-PIM Libraries vulnerability

About KENNETH 19696 Articles
지락문화예술공작단

Be the first to comment

Leave a Reply

Your email address will not be published.


*


이 사이트는 Akismet을 사용하여 스팸을 줄입니다. 댓글 데이터가 어떻게 처리되는지 알아보세요.