CVE:CVE-2016-7966
CNNVD:CNNVD-201610-723
Kmail是一套用于KDE中的电子邮件管理工具。
KMail 5.3.0之前的版本中存在HTML注入漏洞。攻击者可利用该漏洞注入任意HTML代码。
solution:Upgrade kde kmail to a higher version than 4.4.0,and avoid the version (,4.4.0]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 25,and avoid the version 25; Upgrade suse linux_enterprise to a higher version than 12.0,and avoid the version 12.0