Attachment spoofing code execution in Eudora updated since 28.05.2003
Published:		15.11.2004
Source:		BUGTRAQ
SecurityVulns ID:		2847
Type:		client
Level:		5/10
Description:		If "attach" and "attach.exe" co-exist in message and "attach" is clicked, "attach.exe" will be silently executed instead.

Affected:		QUALCOMM : Eudora 5.2
		QUALCOMM : Eudora 6.0
		QUALCOMM : Eudora 6.1
		EUDORA : Eudora 6.2

Original document		Paul Szabo, Eudora 6.2 attachment spoof (15.11.2004)
		Paul Szabo, Eudora 6.2.0.7 attachment spoof (11.10.2004)
		Paul Szabo, Eudora 6.1.2 attachment spoof (08.07.2004)
		Paul Szabo, Eudora 6.0.1 LaunchProtect (26.11.2003)
		Paul Szabo, Eudora 6.0 attachment spoof, exploit (16.09.2003)
		Paul Szabo, Re: Eudora 5.2.1 attachment spoof (28.05.2003)

Discuss:

Read or add your comments to this news (0 comments)