Qualcomm Eudora Spoofed Attachment Line Denial Of Service Vulnerability

Bugtraq ID:	9026
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 12 2003 12:00AM
Updated:	Nov 12 2003 12:00AM
Credit:	This vulnerability was announced in Eudora 6.0.1 release notes.
Vulnerable:	Qualcomm Eudora 6.0 Qualcomm Eudora 5.2.1 Qualcomm Eudora 5.2 .0.9 Qualcomm Eudora 5.2 Qualcomm Eudora 5.1.1 Qualcomm Eudora 5.1 -Jr3 Qualcomm Eudora 5.1 -J Qualcomm Eudora 5.1 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 Qualcomm Eudora 5.0.2 -Jr2 Qualcomm Eudora 5.0.2 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:	Qualcomm Eudora 6.1

Qualcomm Eudora Spoofed Attachment Line Denial Of Service Vulnerability

A vulnerability has been reported by Qualcomm that may be exploited by a remote attacker to cause the Eudora e-mail client to crash. It has been reported that a malicious email that contains a spoofed attachment converted line will trigger this issue in a vulnerable release of Eudora when the malicious message is viewed.

Qualcomm Eudora Spoofed Attachment Line Denial Of Service Vulnerability

The following exploit has been provided:

• /data/vulnerabilities/exploits/EudoraAttachmentSpoofing.pl

Qualcomm Eudora Spoofed Attachment Line Denial Of Service Vulnerability

Solution:
The vendor has released an upgrade to address this issue.


Qualcomm Eudora 6.0

• Qualcomm Eudora 6.0.1
  http://eudora.com/download/