PT-2002-2188 · Qualcomm · Eudora

Publicado

2002-11-21

·

Atualizado

2008-09-05

·

CVE-2002-1210

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Qualcomm Eudora versions 5.1.1 through 5.2
Description: The issue allows remote attackers to read arbitrary files by loading an attachment with malicious script into a frame. This script then executes in the local browser context, potentially leading to unauthorized access to sensitive information.
Recommendations: For versions 5.1.1 through 5.2, consider disabling the feature that loads attachments into frames to prevent malicious scripts from executing in the local browser context. Restrict access to email attachments to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2002-1210

Produtos afetados

Eudora