bug in content-disposition parsing

"Todd Richmond" <[email protected]> Tue, 27 Jul 2004 13:13:37 -0700
Newsgroups gmane.comp.lang.perl.modules.mail-box
Message-ID <005f01c47416$344a17b0$2002140a@gt3>
There is bug when Mail::Box attempts to parse Content-Disposition attributes
when vales are not quoted. Calling
$part->body->disposition->attribute('filename') on a message part with the
header:

Content-Disposition: attachment; filename=Cat.scr; modification-date="Mon,
19 Jul 2004 16:45:17 -0500"

returns "Cat.scr;" with an extra ';' attached. If the space after the ; is
removed, the file becomes "Cat.scr;modification-date=Mon,"

We are seeing numerous messages formated this way which get through filters
that look for executeable extensions

    Todd