CVE-2012-3413

MOYENNE 4.3CVE-2012-3413 · Published 07/08/2012 · updated 16/06/2026

En bref

CVE-2012-3413 est une vulnérabilité MOYENNE (CVSS 4.3) touchant kde pim (kde).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 2.5%, plus élevée que 84.6% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
kde pim kde	`= 4.6= 4.8`	No fix yet

Description

The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email.

References

lists.fedoraproject.org/pipermail/package-announce/2012-July/083946.html
lists.fedoraproject.org/pipermail/package-announce/2012-July/084262.html
secunia.com/advisories/50008 · Vendor Advisory
ubuntu.com/usn/usn-1512-1
openwall.com/lists/oss-security/2012/07/13/3
openwall.com/lists/oss-security/2012/07/13/4
openwall.com/lists/oss-security/2012/07/16/3
openwall.com/lists/oss-security/2012/07/17/11
projects.kde.org/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free