CVE-2004-2005
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute...
CVE-2004-2005 is a medium vulnerability (CVSS 5.1) in Qualcomm Eudora, published May 6, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.49%, the 89th percentile. No source names a fixed version.
- Severity
- 5.1 MediumCVSS 2.0, NVD
- Exploit chance
- 3.49%EPSS, 89th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Qualcomm Eudora 5.2.1/6.x - Embedded Hyperlink Buffer Overrun | 2004-05-07 |
What each source reports
NVD Score used
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.
- Record
CVE-2004-2005- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.
- Record
CVE-2004-2005- Updated
- 2026-11-02
EUVDEUVD-2004-1997No score
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.
- Record
EUVD-2004-1997- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rhhf-gqg6-mv8hNo score
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute...
Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.
- Record
GHSA-rhhf-gqg6-mv8h- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
eudora.com/download/eudora/windows/6.1.1/RelNotes.txt
securityfocus.com/bid/10298
marc.info?l=bugtraq&m=108395487628044&w=2
secunia.com/advisories/11568
exchange.xforce.ibmcloud.com/vulnerabilities/16086
lists.netsys.com/pipermail/full-disclosure/2004-May/021059.html
nvd.nist.gov/vuln/detail/CVE-2004-2005
github.com/advisories/GHSA-rhhf-gqg6-mv8h