medium5.1Public exploit code
CVE-2004-2005
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to th…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Qualcomm Eudora 5.2.1/6.x - Embedded Hyperlink Buffer Overrun2004-05-07 · dos · linux · Verified
Impact
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qualcomm | Eudora | Versions 5.2.1, 6.0, 6.0.1, 6.0.3, 6.1 |
References
- NVD record
- CVE.org record
- http://lists.netsys.com/pipermail/full-disclosure/2004-May/021059.html
- http://marc.info/?l=bugtraq&m=108395487628044&w=2
- http://secunia.com/advisories/11568
- http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt
- http://www.securityfocus.com/bid/10298
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16086