7.5high
CVE-2001-13261 exploit
Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables i…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.7%
percentile 86%
Public exploits
1
Exploit-DB
Summary
Eudora 5.1 allows remote attackers to execute arbitrary code when the "Use Microsoft Viewer" option is enabled and the "allow executables in HTML content" option is disabled, via an HTML email with a form that is activated from an image that the attacker spoofs as a link, which causes the user to execute the form and access embedded attachments.
Exploit prediction (EPSS)
2.70% probability of exploitation in the next 30 days, higher than 86% of all scored CVEs.
Exploits and detections
- EDB-20888 Qualcomm Eudora 5.1 - Hidden Attachment Execution · remote · 2001-05-29
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
- securityfocus.com /archive/1/187128 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/2796 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2001-1326
- NVD: CVE-2001-1326
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.