PT-2002-2188 · Qualcomm · Eudora

Published 2002-11-21 · Updated 2008-09-05 · CVE-2002-1210

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Qualcomm Eudora versions 5.1.1 through 5.2

Description: The issue allows remote attackers to read arbitrary files by loading an attachment with malicious script into a frame. This script then executes in the local browser context, potentially leading to unauthorized access to sensitive information.

Recommendations: For versions 5.1.1 through 5.2, consider disabling the feature that loads attachments into frames to prevent malicious scripts from executing in the local browser context. Restrict access to email attachments to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-1210

Affected Products

Eudora

References · 3

• http://idefense.com/advisory/11.19.02b.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1210 · Security Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html · Note