CVE-2004-2005

Qualcomm Eudora - Buffer Overflow

Title source: rule

Description

Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Paul Szabo · perldoslinux

https://www.exploit-db.com/exploits/24096

View Code ZIP pw:eip

References (6)

[Various Sources] http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/10298

[Mailing List] http://marc.info/?l=bugtraq&m=108395487628044&w=2

[Patch, Vendor Advisory] http://secunia.com/advisories/11568

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/16086

[Various Sources] http://lists.netsys.com/pipermail/full-disclosure/2004-May/021059.html

Scores

EPSS 0.2082

EPSS Percentile 95.6%

Details

Status published

Products (5)

qualcomm/eudora 5.2.1

qualcomm/eudora 6.0

qualcomm/eudora 6.0.1

qualcomm/eudora 6.0.3

qualcomm/eudora 6.1

Published May 06, 2004

Tracked Since Feb 18, 2026