Qualcomm Eudora 5.0.2 - 'Use Microsoft Viewer' Code Execution



EKU-ID: 26233 CVE: CVE-2001-0365;OSVDB-14801 OSVDB-ID:
Author: http-equiv Published: 2001-03-18 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/2490/info

Eudora uses Internet Explorer to assist in the viewing of html messages if the 'Use Microsoft Viewer' option is enabled. Eudora also has a 'allow executables in HTML content' option, which the documentation recommends be disabled for securithy reasons. It is possible for an attacker to excecute arbitrary code on a remote system even if 'allow executables in HTML content' is disabled, if the 'Use Microsoft viewer' option is enabled.

http://www.malware.com/you!DORA.txt