MHonArc is a Perl program designed to automatically parse email into a HTML based archive format. MHonArc includes filtering support designed to strip dangerous tags from HTML email during this process, eliminating JavaScript. A vulnerability has been discovered in some versions of MHonArc. Maliciously constructed HTML mail may bypass this filtering process and inject valid script code into the archive.
MHonArc is a Perl program designed to automatically parse email into a HTML based archive format. MHonArc includes filtering support designed to strip dangerous tags from HTML email during this process, eliminating JavaScript. A vulnerability has been discovered in some versions of MHonArc. Maliciously constructed HTML mail may bypass this filtering process and inject valid script code into the archive.