Vulnerability Details CVE-2002-1770
Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media Player file containing JavaScript code, which is launched and executed in the My Computer zone by Internet Explorer.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.8%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=101680576827641&w=2
- http://marc.info/?l=ntbugtraq&m=101680201823534&w=2
- http://security.greymagic.com/adv/gm002-ie/
- http://www.securityfocus.com/bid/4343
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8609
- http://marc.info/?l=bugtraq&m=101680576827641&w=2
- http://marc.info/?l=ntbugtraq&m=101680201823534&w=2
- http://security.greymagic.com/adv/gm002-ie/
- http://www.securityfocus.com/bid/4343
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8609