Bug 423367

Summary:	Subject and sender field interpret formatting characters
Product:	[Applications] kmail2	Reporter:	Frank Steinmetzger <dev+kde>
Component:	message list	Assignee:	kdepim bugs <kdepim-bugs>
Status:	REPORTED ---
Severity:	minor	CC:	montel
Priority:	NOR
Version:	5.14.2
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed In:
Sentry Crash Report:
Attachments:	mbox of the mail

Description Frank Steinmetzger 2020-06-22 19:51:32 UTC

SUMMARY
I just received a spam mail which separates each character in the subject and the sender with underscores:
subject: _s_u_b_j_e_c_t_
from: _s_e_n_d_e_r_<adress>

As a result, both subject and sender are underlined in the message list.

While this is not a bug or security problem per se, I’d argue it’s an unwanted side-effect.

SOFTWARE/OS VERSIONS
KDE Plasma Version: 5.19.1
KDE Frameworks Version: 5.71.0
Qt Version: 5.15.0

Comment 1 Laurent Montel 2020-06-23 11:41:57 UTC

Could you send me this email as mbox please ?
I can't reproduce it here.

Which theme do you use ?

Comment 2 Frank Steinmetzger 2020-06-24 17:37:12 UTC

Created attachment 129641 [details]
mbox of the mail

Comment 3 Frank Steinmetzger 2020-06-24 17:40:00 UTC

Due to your question I looked at the mail in detail, especially once I noticed that it also appears in the Breeze window title.

There are no actual underscores, but it is a typical unicode „attack“. I pasted the text into vim to use its unicode character query. It tells me they are a combination of the normal character plus ' ̲' U+0332 Dec:818 COMBINING LOW LINE

So I’m afraid this makes this bug report invalid. :-T

For completeness, I attach the mail anyway.