KDE PIM vulnerability

2012-07-1900:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.3 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.2%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10

Packages

kdepim - Personal Information Management apps

Details

It was discovered that KDE PIM html renderer incorrectly enabled
JavaScript, Java and Plugins. A remote attacker could use this flaw to send
an email with embedded JavaScript that possibly executes when opened.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchkdepim< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchakonadiconsole< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchakregator< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchblogilo< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchkaddressbook< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchkaddressbook-mobile< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchkalarm< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchkdepim-dbg< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchkdepim-dev< 4:4.8.4a-0ubuntu0.3UNKNOWN
Ubuntu12.04noarchkdepim-kresources< 4:4.8.4a-0ubuntu0.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	12.04	noarch	kdepim	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	akonadiconsole	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	akregator	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	blogilo	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	kaddressbook	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	kaddressbook-mobile	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	kalarm	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	kdepim-dbg	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	kdepim-dev	< 4:4.8.4a-0ubuntu0.3	UNKNOWN
Ubuntu	12.04	noarch	kdepim-kresources	< 4:4.8.4a-0ubuntu0.3	UNKNOWN