CVE-2005-4080 Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and st...
MediumCVSS 4.3
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Horde IMP 4.0.4 and earlier does not sanitize strings containing UTF16 null characters, which allows remote attackers to conduct cross-site scripting (XSS) attacks via UTF16 encoded attachments and strings that will be executed when viewed using Internet Explorer, which ignores the characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| horde imp | = 2.0 | No fix listed |
| horde imp | = 2.2 | No fix listed |
| horde imp | = 2.2.1 | No fix listed |
| horde imp | = 2.2.2 | No fix listed |
| horde imp | = 2.2.3 | No fix listed |
| horde imp | = 2.2.4 | No fix listed |
| horde imp | = 2.2.5 | No fix listed |
| horde imp | = 2.2.6 | No fix listed |
| horde imp | = 2.2.7 | No fix listed |
| horde imp | = 2.2.8 | No fix listed |
| horde imp | = 2.3 | No fix listed |
| horde imp | = 3.0 | No fix listed |
| horde imp | = 3.1 | No fix listed |
| horde imp | = 3.1.2 | No fix listed |
| horde imp | = 3.2 | No fix listed |
| horde imp | = 3.2.1 | No fix listed |
| horde imp | = 3.2.2 | No fix listed |
| horde imp | = 3.2.3 | No fix listed |
| horde imp | = 3.2.4 | No fix listed |
| horde imp | = 3.2.5 | No fix listed |
| horde imp | = 4.0 | No fix listed |
| horde imp | = 4.0.1 | No fix listed |
| horde imp | = 4.0.2 | No fix listed |
| horde imp | = 4.0.3 | No fix listed |
| horde imp | = 4.0.4 | No fix listed |
References
- 17910 third-party-advisory
- 232 third-party-advisory
- 1015315 vdb-entry
- 20051206 Horde IMP Webmail Client XSS all versions mailing-list
- 15730 exploit vdb-entry
- ADV-2005-2773 vdb-entry
- imp-email-attachment-xss(23465) vdb-entry