CVE-2017-9604

Name of the Vulnerable Software and Affected Versions KDE kmail versions prior to 5.5.2 messagelib versions prior to 5.5.2 KDE Applications versions prior to 17.04.2

Description The issue allows remote attackers to obtain sensitive information by sniffing the network, due to the lack of ensuring a plugin's sign/encrypt action during the use of the Send Later feature.

Recommendations For KDE kmail versions prior to 5.5.2, update to version 5.5.2 or later to resolve the issue. For messagelib versions prior to 5.5.2, update to version 5.5.2 or later to resolve the issue. For KDE Applications versions prior to 17.04.2, update to version 17.04.2 or later to resolve the issue.