vulnwire
5.0med

CVE-2005-04041 exploit

KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypt…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.0%
percentile 87%
Public exploits
1
Exploit-DB

KMail 1.7.1 in KDE 3.3.2 allows remote attackers to spoof email information, such as whether the email has been digitally signed or encrypted, via HTML formatted email.

Exploit prediction (EPSS)

2.98% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

Exploits and detections

  • EDB-25375 KDE KMail 1.7.1 - HTML EMail Remote Email Content Spoofing · remote · 2005-04-11

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

References

  • mail.kde.org /pipermail/kmail-devel/2005-February/015490.html · mailing-list, x_refsource_MLIST, x_transferred
  • secunia.com /advisories/14925 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • bugs.kde.org /show_bug.cgi?id=96020 · x_refsource_MISC, x_transferred
  • securiteam.com /unixfocus/5GP0B0AFFE.html · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.