| Author |
|
mackolo22
Groupie
Joined: 09 October 2018
Location: Poland
Online Status: Offline
Posts: 41
|
| Posted: 25 March 2019 at 6:01am | IP Logged
|
|
|
Hello.
Currently I'm implementing mails decryption. I would like to know if you made any fixes due to EFAIL vulnerability. I created a sample mail message like in the example here: https://efail.de/ and loaded it using MailBee. MailMessage object says that message isn't encrypted and its body is just
"<img src=\"http://efail.de/"
Is your parser resistant to EFAIL attack or the mail I prepared could be invalid?
|
| Back to Top |
|
| |
Alex
AfterLogic Support
Joined: 19 November 2003
Online Status: Offline
Posts: 2206
|
| Posted: 25 March 2019 at 6:08am | IP Logged
|
|
|
I believe it's resistant to this kind of attack because an unclosed HTML tag won't cause the subsequent content to be added in the tag's attribute value in case of or parser. We first locate MIME boundaries and only then analyze the content within them.
Regards,
Alex
|
| Back to Top |
|
| |
mackolo22
Groupie
Joined: 09 October 2018
Location: Poland
Online Status: Offline
Posts: 41
|
| Posted: 25 March 2019 at 6:30am | IP Logged
|
|
|
Thank you very much Alex. I'm glad to hear that. 
Best regards.
|
| Back to Top |
|
| |
MailBee.NET Objects 
MailBee.NET Queue 
MailBee Objects 
WebMail Pro PHP 
AfterLogic Aurora 
MailSuite Pro for Linux 
Unified Messaging Solution 
Search
Register
Login
Topic: EFAIL and MailBee
Privacy policy |
Refund policy