← Database

CVE-2010-0463

MEDIUM CVSS: 5.0 Published: 2010-01-29 Modified: 2026-06-16

Description

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests.

Affected Platforms

Horde Imp

Weakness Type

CWE-200

References