What is the severity of CVE-2004-2005?

CVE-2004-2005 is classified as a moderate severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2004-2005?

To fix CVE-2004-2005, users should upgrade to a patched version of Eudora, specifically 6.1.1 or later.

What types of attacks are associated with CVE-2004-2005?

CVE-2004-2005 allows attackers to exploit a buffer overflow via specially crafted emails with long URLs or attachment names.

Which versions of Eudora are affected by CVE-2004-2005?

CVE-2004-2005 affects Eudora versions 5.2.1, 6.0, 6.0.1, 6.0.3, and 6.1.

Is CVE-2004-2005 a local or remote vulnerability?

CVE-2004-2005 is a remote vulnerability, allowing exploitation through malicious emails.

Vulnerability/
CVE-2004-2005

medium

5.1

CWE

NVD-CWE-Other 119

6/5/2004

10/5/2005

8/8/2024

CVE-2004-2005: Buffer Overflow

First published: Thu May 06 2004(Updated: )

Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Eudora	=5.2.1
Eudora	=6.0
Eudora	=6.0.1
Eudora	=6.0.3
Eudora	=6.1

Remedy

http://secunia.com/advisories/11568

Remedy

http://www.securityfocus.com/bid/10298

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2004-2005?
CVE-2004-2005 is classified as a moderate severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2004-2005?
To fix CVE-2004-2005, users should upgrade to a patched version of Eudora, specifically 6.1.1 or later.
What types of attacks are associated with CVE-2004-2005?
CVE-2004-2005 allows attackers to exploit a buffer overflow via specially crafted emails with long URLs or attachment names.
Which versions of Eudora are affected by CVE-2004-2005?
CVE-2004-2005 affects Eudora versions 5.2.1, 6.0, 6.0.1, 6.0.3, and 6.1.
Is CVE-2004-2005 a local or remote vulnerability?
CVE-2004-2005 is a remote vulnerability, allowing exploitation through malicious emails.

agent/references
agent/type
agent/softwarecombine
agent/remedy
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/weakness
agent/author
agent/severity
agent/description
agent/event
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
collector/nvd-historical
vendor/qualcomm
product/eudora
canonical/qualcomm eudora
canonical/eudora
version/eudora/5.2.1
version/eudora/6.0
version/eudora/6.0.1
version/eudora/6.0.3
version/eudora/6.1

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.