Eudora Email Client Vulnerability Exposing User Data

CVE-2004-1521

Summary

The Eudora email client (version 6.2.0.14) contains a vulnerability that fails to alert users when they forward emails with base64 or quoted-printable encoded attachments. This oversight can permit attackers to exploit spoofed 'Converted' headers, potentially allowing unauthorized access to arbitrary files on the user's system. Users of this version are advised to exercise caution when handling forwarded emails containing encoded attachments to mitigate the risk of data leakage.

References