Unscored severity · published Dec 31, 2002
CVE-2002-1770
Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media Player file containing JavaScript code, which is launched and executed in the My Computer zone by Internet Explorer.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 78% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EU
Eudora · Qualcomm
5.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1770
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1770
marc.info
http://marc.info/?l=bugtraq&m=101680576827641&w=2
marc.info
http://marc.info/?l=ntbugtraq&m=101680201823534&w=2
Exploit
http://security.greymagic.com/adv/gm002-ie/
www.securityfocus.com
http://www.securityfocus.com/bid/4343
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/8609
More from Eudora
7.5
CVE-2000-0342
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka…
–
CVE-2007-3166
Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command
–
CVE-2007-2770
Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long SMTP reply
–
CVE-2004-1521
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote…
–
CVE-2004-2005
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a…