Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed Converted headers.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Eudora | Qualcomm | 6.2.0.14 (including) | 6.2.0.14 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=110037078519691\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=110053102601655\u0026w=2
- http://packetstormsecurity.nl/0411-exploits/eudora62014.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18064
- http://marc.info/?l=bugtraq\u0026m=110037078519691\u0026w=2
- http://marc.info/?l=ntbugtraq\u0026m=110053102601655\u0026w=2
- http://packetstormsecurity.nl/0411-exploits/eudora62014.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18064