Description

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.

Remediation

References

CVE-2026-62642

Related Vulnerabilities

WordPress Other Vulnerability (CVE-2007-1894)

TYPO3 Improper Input Validation Vulnerability (CVE-2013-4250)

WordPress Plugin TC Custom JavaScript Cross-Site Scripting (1.2.1)

Magento Session Fixation Vulnerability (CVE-2019-7849)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2026-58186)

Severity

Medium

Classification

CVE-2026-62642 CWE-835 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities