Kde K-Mail vulnerabilities

CVE-1999-0735 [MEDIUM] CVE-1999-0735: KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories. KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.

CVE-2007-1265 [HIGH] CVE-2007-1265: KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which pr KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.

CVE-2006-7139 [LOW] CWE-20 CVE-2006-7139: Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause Kmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to cause a denial of service (crash) via an HTML e-mail with certain table and frameset tags that trigger a segmentation fault, possibly involving invalid free or delete operations.

CVE-2000-0481 [MEDIUM] CVE-2000-0481: Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment Buffer overflow in KDE Kmail allows a remote attacker to cause a denial of service via an attachment with a long file name.

CVE-2002-0342 [MEDIUM] CVE-2002-0342: Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email mes Kmail 1.2 on KDE 2.1.1 allows remote attackers to cause a denial of service (crash) via an email message whose body is approximately 55 K long.