NVD

Id
84842  
Name
CVE-2017-7414  
Description
In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition 5.x through 5.2.17, OS Command Injection can occur if the user has PGP features enabled in the user's preferences, and has enabled the Should PGP signed messages be automatically verified when viewed? preference. To exploit this vulnerability, an attacker can send a PGP signed email (that is maliciously crafted) to the Horde user, who then must either view or preview it.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-04-27  
Published
2017-04-04  
Modified Date
2017-04-12  
Seq
2017-7414  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
417615 84842 CVE-2017-3013 97547  View
417616 84842 CVE-2017-3013 https://helpx.adobe.com/security/products/acrobat/apsb17-11.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66630 JVNDB-2017-002955 Horde Groupware Webmail Edition で使用される Horde_Crypt におけるコマンドインジェクションの脆弱性 Horde Groupware Webmail Edition で使用される Horde_Crypt には、コマンドインジェクションの脆弱性が存在します。 CVE-2017-7414 0 CVE-2017-7414 84842 5.1 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002955.html 2017-04-04 2017-05-09 View