EU
Product
Eudora
23
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Eudora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2000-0342 | 7.5 | Apr 28 | Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka… Affected: 4.0 |
| CVE-2007-3166 | – | Jun 11 | Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command Affected: 7.1.0.9 |
| CVE-2007-2770 | – | May 21 | Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long SMTP reply Affected: 7.1 |
| CVE-2004-1521 | – | Dec 31 | Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote… Affected: 6.2.0.14 |
| CVE-2004-2005 | – | May 6 | Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a… Affected: 5.2.1; 6.0; 6.0.1; 6.0.3; 6.1 |
| CVE-2004-1944 | – | Apr 14 | Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nested multipart MIME message Affected: 6.0.3; 6.1 |
| CVE-2003-0300 | – | Jun 16 | The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer… Affected: 5.2.1 |
| CVE-2003-0376 | – | Jun 16 | Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and possibly execute arbitrary code via an Attachment Converted… Affected: 5.2.1 |
| CVE-2003-0302 | – | Jun 16 | The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that… Affected: 5.2.1 |
| CVE-2003-0336 | – | May 22 | Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) character in a spoofed "Attachment Converted:" string, which… Affected: 5.2.1 |
| CVE-2002-1770 | – | Dec 31 | Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media… Affected: 5.1 |
| CVE-2002-2313 | – | Dec 31 | Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that… Affected: 5.1.1 |
| CVE-2002-2351 | – | Dec 31 | Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot) Affected: 5.1; 5.2; 5.2.1; 6.0; 6.0.1; 6.1.1 |
| CVE-2002-1210 | – | Nov 29 | Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that… Affected: 5.1.1; 5.2 |
| CVE-2002-0833 | – | Aug 12 | Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to execute arbitrary code via a multi-part message with a long boundary… Affected: 5.0j; 5.1.1 |
| CVE-2002-0456 | – | Aug 12 | Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that… Affected: 5.1 |
| CVE-2001-0677 | – | Sep 20 | Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the "Attachment Converted" MIME header, which sends the file when… Affected: 5.0.2 |
| CVE-2001-0365 | – | Jun 27 | Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML… Affected: through 5.1; 5.0.2 |
| CVE-2001-1326 | – | May 29 | Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via… Affected: 5.1 |
| CVE-2000-0874 | – | Nov 14 | Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF) Affected: 4.2; 4.3 |
| CVE-1999-0427 | – | May 1 | Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names Affected: 4.2; 4.3 |
| CVE-1999-1016 | – | Aug 27 | Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or… Affected: All versions, or not specified |
| CVE-1999-1448 | – | Jul 29 | Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before… Affected: through 3.05 |
Showing 23