PT-2001-2451 · Qualcomm · Eudora

Publicado 2001-05-29 · Atualizado 2008-09-05 · CVE-2001-1326

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Eudora version 5.1

Description: The issue allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled. This can be achieved via an HTML email with a form that is activated from an image that the attacker spoofs as a link, causing the user to execute the form and access embedded attachments.

Recommendations: For Eudora version 5.1, consider disabling the "Use Microsoft Viewer" option to prevent the execution of arbitrary code. Additionally, enable the "allow executables in HTML content" option with caution, as it may introduce other security risks. As a temporary workaround, avoid using HTML emails with forms that can be activated from images until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2001-1326

Produtos afetados

Eudora

Referências · 4

• 🔥 https://exploit-db.com/exploits/20888 · Exploit
• 🔥 http://securityfocus.com/bid/2796 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1326 · Nota de Segurança
• http://securityfocus.com/archive/1/187128 · Aviso do Fabricante