CVE-2012-2578: XSS
Multiple cross-site scripting (XSS) vulnerabilities in SmarterMail 9.2 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a JavaScript alert function used in conjunction with the fromCharCode method, (2) a SCRIPT element, (3) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element, or (4) an innerHTML attribute within an XML document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2578?
The CVE-2012-2578 vulnerability is classified as high severity due to its potential for remote exploitation via cross-site scripting.
How do I fix CVE-2012-2578?
To fix CVE-2012-2578, upgrade SmarterMail to a version that addresses these XSS vulnerabilities, as noted by the vendor.
What types of attacks can CVE-2012-2578 facilitate?
CVE-2012-2578 can facilitate cross-site scripting attacks that allow an attacker to inject arbitrary web scripts into the application.
Which versions of SmarterMail are affected by CVE-2012-2578?
CVE-2012-2578 specifically affects SmarterMail version 9.2.
Can CVE-2012-2578 be exploited through email messages?
Yes, CVE-2012-2578 can be exploited via the injection of scripts through the email message body.