Remote File Reading Vulnerability in Qualcomm Eudora Email Client

CVE-2003-0336

Summary

Qualcomm Eudora 5.2.1 is vulnerable to an exploitation method that enables remote attackers to read arbitrary files. This is achieved by sending an email that contains a specific carriage return (CR) character in the manipulated 'Attachment Converted:' string. The software does not handle this input properly, creating a pathway for unauthorized access to sensitive files through the email client.

References