RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webmail | Roundcube | * | 0.2 (including) |
| Webmail | Roundcube | 0.1 (including) | 0.1 (including) |
| Webmail | Roundcube | 0.1-20050811 (including) | 0.1-20050811 (including) |
| Webmail | Roundcube | 0.1-20050820 (including) | 0.1-20050820 (including) |
| Webmail | Roundcube | 0.1-20051007 (including) | 0.1-20051007 (including) |
| Webmail | Roundcube | 0.1-20051021 (including) | 0.1-20051021 (including) |
| Webmail | Roundcube | 0.1-alpha (including) | 0.1-alpha (including) |
| Webmail | Roundcube | 0.1-beta (including) | 0.1-beta (including) |
| Webmail | Roundcube | 0.1-beta2 (including) | 0.1-beta2 (including) |
| Webmail | Roundcube | 0.1-rc1 (including) | 0.1-rc1 (including) |
| Webmail | Roundcube | 0.1-rc2 (including) | 0.1-rc2 (including) |
| Webmail | Roundcube | 0.1-stable (including) | 0.1-stable (including) |
| Webmail | Roundcube | 0.1.1 (including) | 0.1.1 (including) |
| Webmail | Roundcube | 0.2 (including) | 0.2 (including) |
| Roundcube | Ubuntu | gutsy | * |
| Roundcube | Ubuntu | hardy | * |
| Roundcube | Ubuntu | intrepid | * |
| Roundcube | Ubuntu | upstream | * |