CVE-2001-1318

Vulnerabilities in Qualcomm Eudora WorldMail Server may allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-0365

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags...

CVE-2001-1326

Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to...

Qualcomm Eudora 5.1 - Hidden Attachment Execution

Qualcomm Eudora 5.1 - Hidden Attachment Execution source: https://www.securityfocus.com/bid/2796/info Eudora is an email program for the Windows platform. Eudora contains a vulnerability which may make it possible for an attacker to excecute arbitrary code on a remote system even if 'allow...

Qualcomm Eudora 5.1 - Hidden Attachment Execution

source: https://www.securityfocus.com/bid/2796/info Eudora is an email program for the Windows platform. Eudora contains a vulnerability which may make it possible for an attacker to excecute arbitrary code on a remote system even if 'allow executables in HTML content' is disabled, if the 'Use...

CVE-2000-0874

Eudora mail client includes the absolute path of the sender's host within a virtual card VCF...

CVE-2000-0874

The CVE-2000-0874 entry describes a vulnerability in the Eudora mail client where the absolute path of the sender’s host is disclosed within a virtual card (VCF). Affected component is the VCF handling/serialization in Eudora; root cause is path disclosure leading to potential exposure of local s...

Дырка в eudora (embedded executables)

Возможно встроить в письмо исполняемый файл который будет выполнен без предупреждения...

feeble.you!dora.exploit

Sunday, March 18, 2001 Silent delivery and installation of an executable on a target computer. No client input other than opening an email using Eudora 5.02 - Sponsored Mode provided 'use Microsoft viewer' and 'allow executables in HTML content' are enabled. One wonders why they are there in the...

Qualcomm Eudora 5.0.2 - Use Microsoft Viewer Code Execution

Qualcomm Eudora 5.0.2 - Use Microsoft Viewer Code Execution source: https://www.securityfocus.com/bid/2490/info Eudora uses Internet Explorer to assist in the viewing of html messages if the 'Use Microsoft Viewer' option is enabled. Eudora also has a 'allow executables in HTML content' option,...

Qualcomm Eudora 5.0.2 - 'Use Microsoft Viewer' Code Execution

source: https://www.securityfocus.com/bid/2490/info Eudora uses Internet Explorer to assist in the viewing of html messages if the 'Use Microsoft Viewer' option is enabled. Eudora also has a 'allow executables in HTML content' option, which the documentation recommends be disabled for securithy...

CVE-2000-0874

Eudora mail client includes the absolute path of the sender's host within a virtual card VCF...

CVE-2000-0342

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...

CVE-2000-0342

CVE-2000-0342 (Eudora 4.x) describes a vulnerability where remote attackers can bypass the user warning for executable attachments (.exe, .com, .bat) by using a .lnk file that references the attachment, a.k.a. “Stealth Attachment.” The linked PT-2000-1308 entry confirms the affected software as E...

Проблема с Eudora

Eudora считает исполняемыми только файлы с расширением .exe, .com и .bat, что позволяет прислать пользователю исполняемый файл, который будет запущен без предупреждения...

CVE-1999-0427

Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names...

PT-2000-1014 · Qualcomm · Eudora

Name of the Vulnerable Software and Affected Versions: Eudora version 4.1 Description: The issue allows remote attackers to perform a denial of service by sending attachments with long file names. Recommendations: For Eudora version 4.1, consider restricting the acceptance of attachments with lon...

CVE-2000-0342

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."...

PT-2000-1308 · Qualcomm · Eudora

Name of the Vulnerable Software and Affected Versions: Eudora versions 4.x Description: The issue allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment. This is also known as "Stealth...

Qualcomm Eudora 4.24.3 - Warning Message Circumvention

Qualcomm Eudora 4.24.3 - Warning Message Circumvention source: https://www.securityfocus.com/bid/1157/info A malicious email sender can circumvent warning messages that would normally display when a user attempts to view executable attachments in Eudora 4.2/4.3. Eudora does not prompt a user with...