PatchTheCVEeudora vulnerabilities and fixes
Recent CVEs affecting eudora, with upgrade or downgrade steps. 20 tracked.
eudora has 20 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-06-11. Highest priority: CVE-2007-2770 (score 59/100).
- CVE-2007-3166 MEDIUM 6.8 DOWNGRADE Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code
- CVE-2007-2770 HIGH 9.3 DOWNGRADE Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code
- CVE-2004-2649 MEDIUM 5.8 DOWNGRADE Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large numb
- CVE-2004-2005 MEDIUM 5.1 DOWNGRADE Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code
- CVE-2004-1944 MEDIUM 5.0 DOWNGRADE Eudora 6.1 and 6.0.3 for Windows allows remote attackers to cause a denial of service (crash) via a deeply nes
- CVE-2004-1521 MEDIUM 5.0 DOWNGRADE Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted
- CVE-2003-0376 MEDIUM 5.0 DOWNGRADE Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart
- CVE-2003-0336 MEDIUM 5.0 DOWNGRADE Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage ret
- CVE-2003-0302 MEDIUM 5.0 DOWNGRADE The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibl
- CVE-2003-0300 MEDIUM 5.0 DOWNGRADE DOWNGRADE The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash)
- CVE-2002-2351 MEDIUM 6.4 DOWNGRADE Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachm
- CVE-2002-2313 HIGH 8.8 DOWNGRADE Eudora email client 5.1.1, with "use Microsoft viewer" enabled, allows remote attackers to execute arbitrary p
- CVE-2002-1770 MEDIUM 5.0 DOWNGRADE Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a f
- CVE-2002-1210 MEDIUM 5.0 DOWNGRADE Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, wh
- CVE-2002-0833 HIGH 7.5 DOWNGRADE Buffer overflow in Eudora 5.1.1 and 5.0-J for Windows, and possibly other versions, allows remote attackers to
- CVE-2002-0456 MEDIUM 5.0 DOWNGRADE Eudora 5.1 and earlier versions stores attachments in a directory with a fixed name, which could make it easie
- CVE-2001-1326 HIGH 7.5 DOWNGRADE Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled
- CVE-2001-0677 MEDIUM 5.0 DOWNGRADE Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in
- CVE-2001-0365 HIGH 7.5 UPGRADE Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'all
- CVE-2000-0874 MEDIUM 5.0 DOWNGRADE Eudora mail client includes the absolute path of the sender's host within a virtual card (VCF).
FAQ
How do I fix eudora vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eudora being exploited right now?
None of the tracked eudora CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eudora CVE should I patch first?
CVE-2007-2770 currently ranks highest (59/100): Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code .