emersion / emersion/go-message
Header decoding issue.
Open
- Dominant language
- Go
- Stars
- 458
- Forks
- 129
- PR merge metrics
- No merged PRs in 30d
Description
go-message seems to suffer an issue which was previously discovered in perl `Mail::Header` module.
https://rt.cpan.org/Public/Bug/Display.html?id=113464
The issue involves crafted messages that are usually used to transmit malware bypassing content
scanners.
The header looks like this
```
--Apple-Mail=_13B14614-BE73-1755-BFC6-C42D9D44027D
Content-Disposition: inline; filename="04EBD_xxxx.xxxx_A546BB.zip"
Content-Type: application/x-rar-compressed; x-unix-mode=0600;
name="04EBD_xxxx.xxxx_A546BB.zip"
Content-Transfer-Encoding: base64
```
go-message fails to parse this returning `unexpected EOF`
Contributor guide
Assessment
This issue has not been assessed yet.