Horde Products vCard HTML Injection Vulnerability

Bugtraq ID:	45020
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 23 2010 12:00AM
Updated:	Nov 23 2010 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	Horde Project Horde 3.3.10 Horde Project Horde 3.3.9 Horde Project Horde 3.3.8 Horde Project Horde 3.3.6 Horde Project Horde 3.3.5 Horde Project Horde 3.3.4 Horde Project Horde 3.3.3 Horde Project Horde 3.3.2 Horde Project Horde 3.3.1 Horde Project Horde 3.3 Horde Project Horde 3.2.5 Horde Project Horde 3.2.4 Horde Project Horde 3.2.3 Horde Project Horde 3.2.2 Horde Project Horde 3.2.1 Horde Project Horde 3.1.9 Horde Project Horde 3.1.8 Horde Project Horde 3.1.7 Horde Project Horde 3.1.6 Horde Project Horde 3.1.5 Horde Project Horde 3.1.4 Horde Project Horde 3.1.3 Horde Project Horde 3.1.2 Horde Project Horde 3.1.1 Horde Project Horde 3.0.11 Horde Project Horde 3.0.10 Horde Project Horde 3.0.9 Horde Project Horde 3.0.8 Horde Project Horde 3.0.7 Horde Project Horde 3.0.6 Horde Project Horde 3.0.4 -RC 2 Horde Project Horde 3.0.4 -RC 1 Horde Project Horde 3.0.4 Horde Project Horde 3.0.3 Horde Project Horde 3.0.2 Horde Project Horde 3.0.1 Horde Project Horde 3.0 Horde Project Horde 3.2 Horde Project Horde 3.1 Horde Project Groupware Webmail Edition 1.2.6 Horde Project Groupware Webmail Edition 1.2.5 Horde Project Groupware Webmail Edition 1.2.4 Horde Project Groupware Webmail Edition 1.2.3 RC1 Horde Project Groupware Webmail Edition 1.2.2 Horde Project Groupware Webmail Edition 1.2.1 Horde Project Groupware Webmail Edition 1.2 Horde Project Groupware 1.2.8 Horde Project Groupware 1.2.6 Horde Project Groupware 1.2.5 Horde Project Groupware 1.2.4 Horde Project Groupware 1.2.1 Horde Project Groupware 1.2
Not Vulnerable:	Horde Project Horde 3.3.11 Horde Project Groupware Webmail Edition 1.2.9 Horde Project Groupware 1.2.9

Horde Products vCard HTML Injection Vulnerability

Multiple Horde products are prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data before it is used in dynamic content.

Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.

The following products are affected:

Horde Application Framework version prior to 3.3.11.
Horde Groupware version prior to 1.2.9.
Horde Groupware Webmail Edition version prior to 1.2.9.

Horde Products vCard HTML Injection Vulnerability

Attackers can use a browser to exploit this issue.

Horde Products vCard HTML Injection Vulnerability

Solution:
Updates are available. Please see the references for more information.

Horde Products vCard HTML Injection Vulnerability

References:

• [announce] [SECURITY] Horde 3.3.11 (final) (Horde Project)
  
• [announce] Horde Groupware 1.2.9 (final) (Horde Project)
  
• [announce] Horde Groupware Webmail Edition 1.2.9 (final) (Horde Project)
  
• Horde Homepage (Horde Project)
  
• XSS: VCARD attachments (Horde Project)