CVE-2008-5620

RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image.

Affected Software

Name	Vendor	Start Version	End Version
Webmail	Roundcube	*	0.2 (including)
Webmail	Roundcube	0.1 (including)	0.1 (including)
Webmail	Roundcube	0.1-20050811 (including)	0.1-20050811 (including)
Webmail	Roundcube	0.1-20050820 (including)	0.1-20050820 (including)
Webmail	Roundcube	0.1-20051007 (including)	0.1-20051007 (including)
Webmail	Roundcube	0.1-20051021 (including)	0.1-20051021 (including)
Webmail	Roundcube	0.1-alpha (including)	0.1-alpha (including)
Webmail	Roundcube	0.1-beta (including)	0.1-beta (including)
Webmail	Roundcube	0.1-beta2 (including)	0.1-beta2 (including)
Webmail	Roundcube	0.1-rc1 (including)	0.1-rc1 (including)
Webmail	Roundcube	0.1-rc2 (including)	0.1-rc2 (including)
Webmail	Roundcube	0.1-stable (including)	0.1-stable (including)
Webmail	Roundcube	0.1.1 (including)	0.1.1 (including)
Webmail	Roundcube	0.2 (including)	0.2 (including)
Roundcube	Ubuntu	gutsy	*
Roundcube	Ubuntu	hardy	*
Roundcube	Ubuntu	intrepid	*
Roundcube	Ubuntu	upstream	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-5620
CWE	https://cwe.mitre.org/data/definitions/399.html

Affected Software

References