PT-2002-2492 · Qualcomm+1 · Qualcomm Eudora+2

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1770

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Qualcomm Eudora version 5.1

Description The issue allows remote attackers to execute arbitrary code via an HTML e-mail message. This is achieved by using a file:// URL in a t:video tag to reference an attached Windows Media Player file containing JavaScript code. The code is launched and executed in the My Computer zone by Internet Explorer.

Recommendations For Qualcomm Eudora version 5.1, consider disabling the execution of JavaScript code in attached files as a temporary workaround until a patch is available. Restrict access to attached Windows Media Player files to minimize the risk of exploitation. Avoid using the t:video tag in HTML e-mail messages until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2002-1770

Produtos afetados

Internet Explorer

Qualcomm Eudora

Windows Media Player

Referências · 6

• 🔥 http://security.greymagic.com/adv/gm002-ie · Exploit
• http://marc.info/?l=bugtraq&m=101680576827641&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1770 · Nota de Segurança
• http://marc.info/?l=ntbugtraq&m=101680201823534&w=2 · Nota
• http://securityfocus.com/bid/4343 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8609 · Nota