CVE-2014-8878

KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive information by sniffing the network.

Score

CVSS 3.0 5.9 Medium

Status

Modified - security@debian.org

Published

2017-09-28

Last modified

2024-08-06

Weaknesses

CWE-310

Affected products

• Kmail (Kde)

References

• http://www.openwall.com/lists/oss-security/2015/07/16/10
• http://www.securityfocus.com/bid/75986
• https://bugs.kde.org/show_bug.cgi?id=340312
• https://bugzilla.redhat.com/show_bug.cgi?id=1243777