CVE-2014-3494

Published: Jul 1, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

kio/usernotificationhandler.cpp in the POP3 kioslave in kdelibs 4.10.95 before 4.13.3 does not properly generate warning notifications, which allows man-in-the-middle attackers to obtain sensitive information via an invalid certificate.

Affected (24)

Products: Opensuse: Opensuse · Kde: Kdelibs

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 13.1

Configuration B

23 vulnerable

Vulnerable Software	Affected Versions
Kde Kdelibs	Version 4.10.97
Kde Kdelibs	Version 4.11.0
Kde Kdelibs	Version 4.11.1
Kde Kdelibs	Version 4.11.2
Kde Kdelibs	Version 4.11.3
Kde Kdelibs	Version 4.11.4
Kde Kdelibs	Version 4.11.5
Kde Kdelibs	Version 4.11.80
Kde Kdelibs	Version 4.11.90
Kde Kdelibs	Version 4.11.95
Kde Kdelibs	Version 4.11.97
Kde Kdelibs	Version 4.12.0
Kde Kdelibs	Version 4.12.1
Kde Kdelibs	Version 4.12.2
Kde Kdelibs	Version 4.12.3
Kde Kdelibs	Version 4.12.4
Kde Kdelibs	Version 4.12.5
Kde Kdelibs	Version 4.12.80
Kde Kdelibs	Version 4.12.90
Kde Kdelibs	Version 4.12.95
Kde Kdelibs	Version 4.12.97
Kde Kdelibs	Version 4.13.0
Kde Kdelibs	Version 4.13.1