textviewurisecuritycheck in textview.c in Claws Mail before 3.18.0, and Sylpheed through 3.7.0, does not have sufficient link checks before accepting a click.

Description of problem: A specific mail in the user mbox file cause claws-mail to crash reliabily.

Version-Release number of selected component: claws-mail-3.8.1-1.fc17

Additional info: libreport version: 2.0.14 abrtversion: 2.0.13 backtracerating: 4 cmdline: claws-mail crashfunction: strchr kernel: 3.5.4-2.fc17.x8664

truncated backtrace: :Thread no. 1 (10 frames) : #0 strchr at ../sysdeps/x8664/strchr.S:33 : #1 parseparameters at procmime.c:1756 : #2 procmimeparsecontentdisposition at procmime.c:1842 : #3 procmimeparsemimepart at procmime.c:1967 : #4 procmimeparsemultipart at procmime.c:1566 : #5 procmimeparsemimepart at procmime.c:1994 : #6 procmimeparsemessagerfc822 at procmime.c:1393 : #7 procmimescanfilewithoffset at procmime.c:2058 : #8 procmimescanfilefull at procmime.c:2071 : #9 procmimescanfile at procmime.c:2078