medium4.3
CVE-2016-4868
Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via s…
Impact
Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cybozu | Office | Versions 9.0, 9.1.0, 9.2.0, 9.2.1, 9.3.0, 9.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://jvn.jp/en/jp/JVN08736331/index.html
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000190.html
- http://www.securityfocus.com/bid/97713
- https://support.cybozu.com/ja-jp/article/9433
- http://jvn.jp/en/jp/JVN08736331/index.html
- http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000190.html
- http://www.securityfocus.com/bid/97713
- https://support.cybozu.com/ja-jp/article/9433