TITLE: @Mail Webmail Image Tag Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18874 VERIFY ADVISORY: http://secunia.com/advisories/18874/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: >From remote SOFTWARE: @Mail 4.x http://secunia.com/product/5459/ DESCRIPTION: Thomas Pollet has discovered a vulnerability in @Mail, which can be exploited by malicious people to conduct script insertion attacks. The vulnerability is cause due to missing sanitisation of email messages that contain HTML image tags with "javascript:" URLs that has " " in the middle. This can be exploited to execute arbitrary JavaScript code in the context of the user's session. Example: Successful exploitation requires that the user views images in an email message. The vulnerability has been confirmed in version 4.3. Other versions may also be affected. SOLUTION: Filter potential malicious email messages with an email filtering gateway. PROVIDED AND/OR DISCOVERED BY: Thomas Pollet ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------