CVE-2012-3413

CVE-2012-3413 affects KDE PIM (kdepim) 4.6–4.8 where HTMLQuoteColorer::process does not disable JavaScript, Java, and browser plugins in HTML mail, enabling remote code or HTML injection via crafted emails. Connected advisories indicate a remediation: the Fedora update (FEDORA-2012-10411) patches...