Every CVE Search/ Get API key

CVE-2001-0365

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft...

7.5 HighPublic exploit

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags.

Exploit likelihood

3.19%Down 4.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags.

Record
CVE-2001-0365
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags.

Record
CVE-2001-0365
Updated
2026-11-02
EUVDEUVD-2001-0362 No score

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags.

Record
EUVD-2001-0362
Updated
2026-11-03
GitHub AdvisoriesGHSA-p673-v55p-52j2 No score

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft...

Eudora before 5.1 allows a remote attacker to execute arbitrary code, when the 'Use Microsoft Viewer' and 'allow executables in HTML content' options are enabled, via an HTML email message containing Javascript, with ActiveX controls and malicious code within IMG tags.

Record
GHSA-p673-v55p-52j2
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBQualcomm Eudora 5.0.2 - 'Use Microsoft Viewer' Code Execution2001-03-18

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-0365 is a high vulnerability (CVSS 7.5) in Qualcomm Eudora, published June 27, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.19%, the 88th percentile. No source names a fixed version.

References

MoveEnter Open