Attacks on email client users using 'mailto:' links
Researchers from Ruhr University Bochum (Germany) analyzed (PDF) the behavior of email clients when processing 'mailto:' links with extended parameters. Five out of the twenty email clients reviewed were found to be vulnerable to an attack that manipulates resource substitution using the 'attach' parameter. An additional six email clients were susceptible to attacks through PGP and S/MIME key replacement, while three clients were vulnerable to […]
