CVE-2010-4554
N/A
Published: July 14, 2011 at 11:00 PM UTC
Updated: June 16, 2026 at 11:25 PM UTC
1 product affected across 1 vendorSquirrelMail
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
functions/page_header.php in SquirrelMail 1.4.21 and earlier does not prevent page rendering inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.4.210.10.1.10.1.20.20.2.10.30.3.10.3pre10.3pre20.40.4pre10.4pre20.50.5pre10.5pre21.01.0.11.0.21.0.31.0.41.0.51.0.61.0pre11.0pre21.0pre31.1.01.1.11.1.21.1.31.21.2.01.2.0 rc31.2.11.2.101.2.111.2.21.2.31.2.41.2.51.2.61.2.6 rc11.2.71.2.81.2.91.3.01.3.11.3.21.41.4 rc11.4.01.4.0 rc11.4.0 rc2a1.4.0-r11.4.11.4.101.4.10a1.4.111.4.121.4.131.4.151.4.15 rc11.4.15rc11.4.161.4.171.4.181.4.191.4.21.4.2-r11.4.2-r21.4.2-r31.4.2-r41.4.2-r51.4.201.4.31.4.3 r31.4.3 rc11.4.3a1.4.3aa1.4.41.4.4 rc11.4.51.4.5 rc11.4.61.4.6 rc11.4.6_cvs1.4.71.4.81.4.8.4fc61.4.91.4.9a
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.html
- http://rhn.redhat.com/errata/RHSA-2012-0103.html
- http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STABLE/squirrelmail/functions/page_header.php?view=patch&r1=14117&r2=14116&pathrev=14117
- http://www.debian.org/security/2011/dsa-2291
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:123
References (9)
Vendor Advisoryx_refsource_APPLE
Source: [email protected]
http://lists.apple.com/archives/security-announce/2012/Feb/msg00000.htmlVendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2012-0103.htmlVendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2011/dsa-2291Vendor Advisoryx_refsource_MANDRIVA
Source: [email protected]
http://www.mandriva.com/security/advisories?name=MDVSA-2011:123x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
http://www.squirrelmail.org/security/issue/2011-07-12Quick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card