Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2000-0342 | 2 Feb 202408:16 | – | circl |
 | CVE-2000-0342 | 12 Jul 200004:00 | – | cve |
| CVE-2003-0336 | 23 May 200304:00 | – | cve |
 | CVE-2000-0342 | 12 Jul 200004:00 | – | cvelist |
| CVE-2003-0336 | 23 May 200304:00 | – | cvelist |
 | Qualcomm Eudora 5.2.1/6.0 - File Attachment Spoofing Variant | 22 May 200300:00 | – | exploitdb |
| Qualcomm Eudora 6.0.1/6.1.1 - Attachment LaunchProtect Warning Bypass (1) | 25 Nov 200300:00 | – | exploitdb |
| Qualcomm Eudora 6.0.1/6.1.1 - Attachment LaunchProtect Warning Bypass (2) | 25 Nov 200300:00 | – | exploitdb |
 | EUVD-2003-0331 | 7 Oct 202500:30 | – | euvd |
 | CVE-2000-0342 | 28 Apr 200004:00 | – | nvd |
10
source: https://www.securityfocus.com/bid/1157/info
A malicious email sender can circumvent warning messages that would normally display when a user attempts to view executable attachments in Eudora 4.2/4.3. Eudora does not prompt a user with the warning message if they are attempting to open a file that is neither .exe, .com, or .bat.
Inserting the tag
<a href="file:///c:/eudora/attach/file.lnk"\>http ://www.example.com</ a>
in an email message will display as:
http ://www.example.com
in a Eudora email client.
Therefore, when a user clicks on this link, it will automatically open up the executable file without warning.Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jul 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
CVSS 3.17.5
EPSS0.03453