CVE-1999-1448

3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.6%
top 31.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qualcomm EudoraQualcomm Eudora Light
Timeline
PublishedJul 29
Latest updateApr 30

Description

Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divide By Zero error, or (2) dates that are 100 years after the current date, which causes a segmentation fault.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDqualcomm/eudora3.05

🔴Vulnerability Details

2
GHSA
GHSA-6ppx-cq5m-vxwq: Eudora and Eudora Light before 3↗2022-04-30
▶
CVEList
CVE-1999-1448: Eudora and Eudora Light before 3↗2001-09-12
▶
CVE-1999-1448 (MEDIUM CVSS 5) | Eudora and Eudora Light before 3.05 | cvebase.io