CVE-2012-2584: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS) expression property in conjunction with a CSS comment within the STYLE attribute of an IMG element, (2) the CSS expression property in conjunction with multiple CSS comments within the STYLE attribute of an arbitrary element, or (3) an innerHTML attribute within an XML document.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-2584?
CVE-2012-2584 is classified as a high severity vulnerability due to its potential for remote code execution via cross-site scripting attacks.
How do I fix CVE-2012-2584?
To fix CVE-2012-2584, upgrade to a version of Alt-N MDaemon that is not affected by these vulnerabilities.
What systems are affected by CVE-2012-2584?
CVE-2012-2584 specifically affects Alt-N MDaemon Free version 12.5.4.
What type of vulnerability is CVE-2012-2584?
CVE-2012-2584 involves multiple cross-site scripting (XSS) vulnerabilities that can allow attackers to inject arbitrary scripts.
Can CVE-2012-2584 be exploited remotely?
Yes, CVE-2012-2584 can be exploited remotely by attackers through crafted e-mail messages.