CVE-2001-0365

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

3.19% chance of exploitation in the next 30 days, 88th percentile

Published

2002-03-09

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://marc.info/?l=bugtraq&m=98503741910995&w=2

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/20688

Security advisories

• http://www.securityfocus.com/bid/2490

References

• CVE Record
• NVD entry