QwikSec

Security Database

CVE

CWE

Training

CVE-2012-1103

Published: Sep 25, 2012

Modified: Sep 16, 2024

PUBLISHED

Description

emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://notmuchmail.org/news/release-0.11.1/

x_refsource_CONFIRM

vdb-entry

x_refsource_BID

[oss-security] 20120304 Re: CVE request: notmuch

mailing-list

x_refsource_MLIST

vendor-advisory

x_refsource_DEBIAN

http://git.notmuchmail.org/git/notmuch/blobdiff/3f2050ac221a4c940c12442f156f12fff11600c6..ae438ccd8c77831158c7c30f19710d798ee4a6b4:/emacs/notmuch-mua.el

x_refsource_CONFIRM

[oss-security] 20120304 CVE request: notmuch

mailing-list

x_refsource_MLIST

third-party-advisory

x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.