CVE-2004-1521
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains...
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers.
Exploit likelihood
What each source reports
NVD Score used
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers.
- Record
CVE-2004-1521- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE List No score
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers.
- Record
CVE-2004-1521- Updated
- 2026-11-02
EUVDEUVD-2004-1515 No score
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers.
- Record
EUVD-2004-1515- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8p37-9qq5-4f8v No score
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains...
Eudora 6.2.0.14 does not issue a warning when a user forwards an e-mail message that contains base64 or quoted-printable encoded attachments, which makes it easier for remote attackers to read arbitrary files via spoofed "Converted" headers.
- Record
GHSA-8p37-9qq5-4f8v- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Eudora 6.0.3 (Windows) - Attachment Spoofing | 2004-03-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-1521 is a medium vulnerability (CVSS 5.0) in Qualcomm Eudora, published December 31, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 1.72%, the 77th percentile. No source names a fixed version.