| Package | Affected versions | Patched versions |
|---|---|---|
| kde pim | = 4.6= 4.8 |
The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free