CVE-2004-2649

Published: Dec 31, 2004Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters (e.g. spaces coded as "&#32") in the middle of the URL.

Affected (1)

Products: Eudora: Eudora

Eudora

1 product

Eudora

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Eudora Eudora	Version 6.1.0.6

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://archives.neohapsis.com/archives/bugtraq/2004-05/0066.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/11581

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/alerts/2004/May/1010117.html

Source: cve@mitre.org

Exploit

http://www.eudora.com/download/eudora/windows/6.1.2/RelNotes.txt

Source: cve@mitre.org

Patch

http://www.osvdb.org/6009

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/10305

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/16105

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2004-05/0066.html