CVE-2017-7413

published 2017-04-04

CVE-2017-7413: In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated…

Priority P2 64 high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

In Horde_Crypt before 2.7.6, as used in Horde Groupware Webmail Edition through 5.2.17, OS Command Injection can occur if the attacker is an authenticated Horde Webmail user, has PGP features enabled in their preferences, and attempts to encrypt an email addressed to a maliciously crafted email address.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
debian	php-horde-crypt	< php-horde-crypt 2.7.5-2 (bookworm)	php-horde-crypt 2.7.5-2 (bookworm)
horde	groupware	<= 5.2.17	—

Detection & IOCs extracted from sources · hover to see the quote

• → Trigger condition: authenticated Horde Webmail user with PGP features enabled attempts to encrypt an email to a maliciously crafted email address, resulting in OS command injection ↗

• · Vulnerability only exploitable when PGP features are enabled in the user's Horde Webmail preferences; disabling PGP removes the attack surface ↗
• · Affected versions: Horde_Crypt before 2.7.6 and Horde Groupware Webmail Edition through 5.2.17; Debian fixed in package version 2.7.5-2 ↗
• · Exploitation requires authentication; this is not an unauthenticated/remote attack vector (scope: local per Debian tracker) ↗

CVSS provenance

nvd v3.0 8.8 HIGH CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 9.0 CRITICAL AV:N/AC:L/Au:S/C:C/I:C/A:C

osv 8.8 HIGH

vendor_debian 8.8 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-78