Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html | |
| http://www.idefense.com/advisory/11.19.02b.txt | Patch Vendor Advisory |
| http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html | |
| http://www.idefense.com/advisory/11.19.02b.txt | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html - | |
| References | () http://www.idefense.com/advisory/11.19.02b.txt - Patch, Vendor Advisory |
Information
Published : 2002-11-29 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2002-1210
Mitre link : CVE-2002-1210
CVE.ORG link : CVE-2002-1210
JSON object : View
Products Affected
qualcomm
- eudora
CWE
