CVE-2014-8878 KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network.
MediumCVSS 5.9
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| KDE kmail | = 4.11.5 | No fix listed |
References
- [oss-security] 20150716 Re: CVE Request: kmail: Attachments are not encrypted when mailing-list patch third-party-advisory vdb-entry
- 75986 third-party-advisory vdb-entry
- bugs.kde.org issue-tracking patch vendor-advisory
- bugzilla.redhat.com issue-tracking patch third-party-advisory vdb-entry