BID:12430

Qualcomm Eudora Multiple Unspecified Vulnerabilities

Info

Qualcomm Eudora Multiple Unspecified Vulnerabilities

Bugtraq ID:	12430
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 02 2005 12:00AM
Updated:	Feb 02 2005 12:00AM
Credit:	These vulnerabilities were announced by John Heasman of NGSSoftware.
Vulnerable:	Qualcomm Eudora 6.2 .0.7 Beta Qualcomm Eudora 6.2 .0.14 Qualcomm Eudora 6.1.2 Qualcomm Eudora 6.1.1 Qualcomm Eudora 6.1 Qualcomm Eudora 6.0.3 Qualcomm Eudora 6.0.1 Qualcomm Eudora 6.0 .22 Qualcomm Eudora 6.0 Qualcomm Eudora 5.2.1 Qualcomm Eudora 5.2 .0.9 Qualcomm Eudora 5.2 Qualcomm Eudora 5.1.1 Qualcomm Eudora 5.1 -Jr3 Qualcomm Eudora 5.1 -J Qualcomm Eudora 5.1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Qualcomm Eudora 5.0.2 -Jr2 Qualcomm Eudora 5.0.2 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Qualcomm Eudora 4.3.2 Qualcomm Eudora 4.3.1 Qualcomm Eudora 4.3 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Qualcomm Eudora 4.2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 Qualcomm Eudora 4.0 X Qualcomm Eudora 3.0 X

Not Vulnerable:	Qualcomm Eudora 6.2.1

Discussion

Qualcomm Eudora Multiple Unspecified Vulnerabilities

Eudora is reported prone to multiple unspecified vulnerabilities. It is reported that these issues may be leveraged by a remote attacker to execute arbitrary code.

Reports indicate that these issues may be triggered when a specially crafted email is previewed or opened and when a specially crafted stationary or mailbox file is opened.

These issues are reported to affect Eudora versions prior to 6.2.1 for Microsoft Windows platforms only.

Exploit / POC

Qualcomm Eudora Multiple Unspecified Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

Qualcomm Eudora Multiple Unspecified Vulnerabilities

Solution:
The vendor has released Eudora version 6.2.1 for Microsoft Windows platforms in order to address these vulnerabilities.

Qualcomm Eudora 3.0 X