1. CVE-Search
  2. CVE-2012-3413
ID CVE-2012-3413
Summary The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email.
References
Vulnerable Configurations
  • cpe:2.3:a:kde:kde_pim:4.6:*:*:*:*:*:*:*
    cpe:2.3:a:kde:kde_pim:4.6:*:*:*:*:*:*:*
  • cpe:2.3:a:kde:kde_pim:4.8:*:*:*:*:*:*:*
    cpe:2.3:a:kde:kde_pim:4.8:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 08-08-2012 - 04:00)
Impact:
Exploitability:
CWE CWE-16
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:N
refmap via4
confirm https://projects.kde.org/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54
fedora
  • FEDORA-2012-10410
  • FEDORA-2012-10411
mlist
  • [oss-security] 20120713 CVE Request: KDE Pim
  • [oss-security] 20120713 Re: CVE Request: KDE Pim
  • [oss-security] 20120716 Re: CVE Request: KDE Pim
  • [oss-security] 20120717 Re: CVE Request: KDE Pim
secunia 50008
ubuntu USN-1512-1
Last major update 08-08-2012 - 04:00
Published 07-08-2012 - 20:55
Last modified 08-08-2012 - 04:00
Back to Top