NVD

Id
45008  
Name
CVE-2012-3413  
Description
The HTMLQuoteColorer::process function in messageviewer/htmlquotecolorer.cpp in KDE PIM 4.6 through 4.8 does not disable JavaScript, Java, and Plugins, which allows remote attackers to inject arbitrary web script or HTML via a crafted email.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2012-08-07  
Modified Date
2012-08-08  
Seq
2012-3413  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225544 45008 CVE-2012-3413 FEDORA-2012-10410  View
225545 45008 CVE-2012-3413 FEDORA-2012-10411  View
225546 45008 CVE-2012-3413 USN-1512-1  View
225547 45008 CVE-2012-3413 [oss-security] 20120713 CVE Request: KDE Pim  View
225548 45008 CVE-2012-3413 [oss-security] 20120713 Re: CVE Request: KDE Pim  View
225549 45008 CVE-2012-3413 [oss-security] 20120716 Re: CVE Request: KDE Pim  View
225550 45008 CVE-2012-3413 [oss-security] 20120717 Re: CVE Request: KDE Pim  View
225551 45008 CVE-2012-3413 https://projects.kde.org/projects/kde/kdepim/repository/revisions/dbb2f72f4745e00f53031965a9c10b2d6862bd54  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27791 JVNDB-2012-003498 KDE PIM における任意の Web スクリプトまたは HTML を挿入される脆弱性 KDE PIM の messageviewer/htmlquotecolorer.cpp 内の HTMLQuoteColorer::process 関数は、JavaScript、Java、およびプラグインが無効にならないため、任意の Web スクリプトまたは HTML を挿入される脆弱性が存在します。 CVE-2012-3413 56651 CVE-2012-3413 45008 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003498.html 2012-08-07 2012-08-09 View