CVE-2006-0195

Publication date 24 February 2006

Last updated 17 July 2025

Ubuntu priority

Medium

Why this priority?

Description

Interpretation conflict in the MagicHTML filter in SquirrelMail 1.4.0 to 1.4.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via style sheet specifiers with invalid (1) ”/*” and ”*/” comments, or (2) a newline in a “url” specifier, which is processed by certain web browsers including Internet Explorer.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
squirrelmail 7.04 feisty
Fixed 1.4.9a-1ubuntu0.1
6.10 edgy
Fixed 1.4.8-1ubuntu0.1
6.06 LTS dapper
Fixed 1.4.6-1ubuntu0.1

References

Other references