Unrated severityNVD Advisory· Published Aug 7, 2012· Updated Apr 29, 2026

CVE-2012-3413

Description

The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email.

Affected products

KDE/Kde Pim2 versions
cpe:2.3:a:kde:kde_pim:4.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:kde:kde_pim:4.6:*:*:*:*:*:*:*
- cpe:2.3:a:kde:kde_pim:4.8:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/50008nvdVendor Advisory
lists.fedoraproject.org/pipermail/package-announce/2012-July/083946.htmlnvd
lists.fedoraproject.org/pipermail/package-announce/2012-July/084262.htmlnvd
ubuntu.com/usn/usn-1512-1nvd
www.openwall.com/lists/oss-security/2012/07/13/3nvd
www.openwall.com/lists/oss-security/2012/07/13/4nvd
www.openwall.com/lists/oss-security/2012/07/16/3nvd
www.openwall.com/lists/oss-security/2012/07/17/11nvd
projects.kde.org/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000