Some vulnerabilities have been reported in RoundCube Webmail, which can be exploited by malicious people to cause a DoS (Denial of Service) and compromise a vulnerable system.

1) A vulnerability is caused due to the use of the vulnerable "chuggnutt.com HTML to Plain Text Conversion PHP class", which can be exploited by sending specially crafted POST data to the bin/html2text.php script.

For more information:
SA33145

2) Input passed to the "w" and "h" parameters in bin/quotaimg.php is not properly sanitised before being used as image size. This can be exploited to e.g. consume large amounts of system resources via overly large size parameters.

The vulnerabilities are reported in version 0.2-beta.

Solution
Apply the patch.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Reported in a bug by RealMurphy.
http://trac.roundcube.net/ticket/1485618

2) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://trac.roundcube.net/ticket/1485618

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers