Bug 423367 - Subject and sender field interpret formatting characters
Summary: Subject and sender field interpret formatting characters
Status: REPORTED
Alias: None
Product: kmail2
Classification: Applications
Component: message list (show other bugs)
Version: 5.14.2
Platform: Arch Linux Linux
: NOR minor
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-06-22 19:51 UTC by Frank Steinmetzger
Modified: 2020-06-24 17:40 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:

Attachments
mbox of the mail (19.01 KB, application/mbox)
2020-06-24 17:37 UTC, Frank Steinmetzger 		Details
View All Add an attachment

Note You need to log in before you can comment on or make changes to this bug.
Description Frank Steinmetzger 2020-06-22 19:51:32 UTC 
SUMMARY
I just received a spam mail which separates each character in the subject and the sender with underscores:
subject: _s_u_b_j_e_c_t_
from: _s_e_n_d_e_r_<adress>

As a result, both subject and sender are underlined in the message list.

While this is not a bug or security problem per se, I’d argue it’s an unwanted side-effect.

SOFTWARE/OS VERSIONS
KDE Plasma Version: 5.19.1
KDE Frameworks Version: 5.71.0
Qt Version: 5.15.0
Comment 1 Laurent Montel 2020-06-23 11:41:57 UTC 
Could you send me this email as mbox please ?
I can't reproduce it here.

Which theme do you use ?
Comment 2 Frank Steinmetzger 2020-06-24 17:37:12 UTC 
Created attachment 129641 [details]
mbox of the mail
Comment 3 Frank Steinmetzger 2020-06-24 17:40:00 UTC 
Due to your question I looked at the mail in detail, especially once I noticed that it also appears in the Breeze window title.

There are no actual underscores, but it is a typical unicode „attack“. I pasted the text into vim to use its unicode character query. It tells me they are a combination of the normal character plus ' ̲' U+0332 Dec:818 COMBINING LOW LINE

So I’m afraid this makes this bug report invalid. :-T

For completeness, I attach the mail anyway.