NVD

Id
84841  
Name
CVE-2017-7413  
Description
In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has PGP features enabled in their preferences, and attempts to encrypt an email addressed to a maliciously crafted email address.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-04-27  
Published
2017-04-04  
Modified Date
2017-04-11  
Seq
2017-7413  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
417613 84841 CVE-2017-3012 97547  View
417614 84841 CVE-2017-3012 https://helpx.adobe.com/security/products/acrobat/apsb17-11.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66629 JVNDB-2017-002954 Horde Groupware Webmail Edition で使用される Horde_Crypt におけるコマンドインジェクションの脆弱性 Horde Groupware Webmail Edition で使用される Horde_Crypt には、コマンドインジェクションの脆弱性が存在します。 CVE-2017-7413 0 CVE-2017-7413 84841 9 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002954.html 2017-04-04 2017-05-09 View