DEBIAN-CVE-2012-6640

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2012-6640
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-6640.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2012-6640
Upstream
Published
2014-04-05T21:55:06.330Z
Modified
2026-04-28T20:05:01.144496Z
Summary
[none]
Details

Cross-site scripting (XSS) vulnerability in Horde Internet Mail Program (IMP) before 5.0.22, as used in Horde Groupware Webmail Edition before 4.0.9, allows remote attackers to inject arbitrary web script or HTML via a crafted SVG image attachment, a different vulnerability than CVE-2012-5565.

References

Affected packages

Debian:11 / php-horde-imp

Package

Name
php-horde-imp
Purl
pkg:deb/debian/php-horde-imp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.22

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-6640.json"

Debian:12 / php-horde-imp

Package

Name
php-horde-imp
Purl
pkg:deb/debian/php-horde-imp?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.0.22

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-6640.json"