Re: Mailsploit

On 12/12/2017 12:31 PM, Arnaud Duplessier wrote:
>
> Which version and plateform do you tested ? 

I'm using my own build on Win10-x64. I use the 3-pane view. I haven't 
touched anything in Cyrus's original code for handling headers so older 
versions should also be fine.

In some cases the From line will split across two lines, so the Subject 
will get shoved down and not be visible. This happens when an encoded 
newline is included in the From text. If the text included two encoded 
newlines, I suspect it would push the "real" address below the visible 
area and the exploit would "succeed", but you'd not see the Subject: 
line. If you click the show-headers button, you can still see the raw 
exploit.

Remember that this exploit is about hiding header information from 
users. So stripping newlines from encoded headers might be a worthwhile 
thing to do here.