
CVE-2004-2301
https://notcve.org/view.php?id=CVE-2004-2301
31 Dec 2004 — Eudora before 6.1.1 allows remote attackers to cause a denial of service (crash) via an e-mail with a long "To:" field, possibly due to a buffer overflow. • http://www.eudora.com/download/eudora/windows/6.1.1/RelNotes.txt •

CVE-2004-2005 – Qualcomm Eudora 5.2.1/6.x - Embedded Hyperlink Buffer Overrun
https://notcve.org/view.php?id=CVE-2004-2005
06 May 2004 — Buffer overflow in Eudora for Windows 5.2.1, 6.0.3, and 6.1 allows remote attackers to execute arbitrary code via an e-mail with (1) a link to a long URL to the C drive or (2) a long attachment name. • https://www.exploit-db.com/exploits/24096 •

CVE-2003-0376 – Qualcomm Eudora 5.x/6.0 - Spoofed Attachment Line Denial of Service
https://notcve.org/view.php?id=CVE-2003-0376
06 Jun 2003 — Buffer overflow in Eudora 5.2.1 allows remote attackers to cause a denial of service (crash and failed restart) and possibly execute arbitrary code via an Attachment Converted argument with a large number of . (dot) characters. Desbordamiento de búfer en Eudora 5.2.1 permite que atacantes remotos causen una denegación de servicio (caída y reinicio fallido) y que posiblemente ejecuten código arbitrario mediante un argumento Attachment Converted con un elevado número de caracteres "." (punto). • https://www.exploit-db.com/exploits/23374 •

CVE-2003-0336 – Qualcomm Eudora 4.2/4.3 - Warning Message Circumvention
https://notcve.org/view.php?id=CVE-2003-0336
22 May 2003 — Qualcomm Eudora 5.2.1 allows remote attackers to read arbitrary files via an email message with a carriage return (CR) character in a spoofed "Attachment Converted:" string, which is not properly handled by Eudora. • https://www.exploit-db.com/exploits/19885 •

CVE-2003-0300
https://notcve.org/view.php?id=CVE-2003-0300
15 May 2003 — The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer signedness errors or integer overflow errors. El cliente IMAP para Sylpheed 0.8.11 permite que servidores IMAP remotos dañinos originen una denegación de servicio (caída) mediante ciertos tamaños literales muy largos que causan desbordamientos de búfer de enteros. • http://marc.info/?l=bugtraq&m=105294024124163&w=2 •

CVE-2003-0302
https://notcve.org/view.php?id=CVE-2003-0302
15 May 2003 — The IMAP Client for Eudora 5.2.1 allows remote malicious IMAP servers to cause a denial of service and possibly execute arbitrary code via certain large literal size values that cause either integer signedness errors or integer overflow errors. El cliente IMAP para Eudora 5.2.1 permite que servidores IMAP dañinos provoquen una denegación de servicio y posiblemente ejecuten código arbitrario mediante ciertos valores literales muy grandes que provocan errores de desbordamiento de enteros. • http://marc.info/?l=bugtraq&m=105294024124163&w=2 •

CVE-2002-2351 – Qualcomm Eudora 5/6 - File Attachment Spoofing
https://notcve.org/view.php?id=CVE-2002-2351
31 Dec 2002 — Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." (dot). • https://www.exploit-db.com/exploits/21695 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •