Through a malicious URL that contained a quote character it was possible to inject HTML code in KMail's plaintext viewer. Due to the parser used on the URL it was not possible to include the equal sign (=) or a space into the injected HTML, which greatly reduces the available HTML functionality. Although it is possible to include an HTML comment indicator to hide content.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2016-12-23T22:00:00
Updated: 2024-08-06T02:13:21.538Z
Reserved: 2016-09-09T00:00:00
Link: CVE-2016-7966
Vulnrichment
No data.
NVD
Status : Modified
Published: 2016-12-23T22:59:00.220
Modified: 2024-11-21T02:58:48.047
Link: CVE-2016-7966
Redhat