Qualcomm Eudora Embedded Hyperlink Buffer Overrun Vulnerability

Bugtraq ID:	10298
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 07 2004 12:00AM
Updated:	May 07 2004 12:00AM
Credit:	Discovery is credited to Paul Szabo.
Vulnerable:	Qualcomm Eudora 6.1 Qualcomm Eudora 6.0.3 Qualcomm Eudora 6.0.1 Qualcomm Eudora 6.0 Qualcomm Eudora 5.2.1
Not Vulnerable:	Qualcomm Eudora 6.1.1

Qualcomm Eudora Embedded Hyperlink Buffer Overrun Vulnerability

Qualcomm Eudora is reported to be prone to a remotely exploitable buffer overrun vulnerability.

The issue is exposed when an excessively long hyperlink to a file resource is embedded in an HTML e-mail. This may permit remote attackers to execute arbitrary code via malicious e-mail in the context of the client user.

This issue was reported in Eudora on Windows platforms. Eudora for Apple Mac operating systems may be similarly affected, though this has not been confirmed.

Qualcomm Eudora Embedded Hyperlink Buffer Overrun Vulnerability

The following proof-of-concept will cause a denial of service:

• /data/vulnerabilities/exploits/eudora_url_dos.pl

Qualcomm Eudora Embedded Hyperlink Buffer Overrun Vulnerability

Solution:
This issue is reported to be fixed in Eudura version 6.1.1.


Qualcomm Eudora 5.2.1

• Qualcomm Eudora 6.1.1
  http://www.eudora.com/products/eudora/download/windows.html

Qualcomm Eudora 6.0

• Qualcomm Eudora 6.1.1
  http://www.eudora.com/products/eudora/download/windows.html

Qualcomm Eudora 6.0.1

• Qualcomm Eudora 6.1.1
  http://www.eudora.com/products/eudora/download/windows.html

Qualcomm Eudora 6.0.3

• Qualcomm Eudora 6.1.1
  http://www.eudora.com/products/eudora/download/windows.html

Qualcomm Eudora 6.1

• Qualcomm Eudora 6.1.1
  http://www.eudora.com/products/eudora/download/windows.html

Qualcomm Eudora Embedded Hyperlink Buffer Overrun Vulnerability

References:

• Eudora Product Homepage (Qualcomm)
  
• Eudora file URL buffer overflow ([email protected] (Paul Szabo))