← back
CVE-2004-2649

CVE-2004-2649

EPSS 2.5%
Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters (e.g. spaces coded as "&#32") in the middle of the URL.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/24098unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2004-05/0066.htmlhttp://secunia.com/advisories/11581http://securitytracker.com/alerts/2004/May/1010117.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/16105http://www.eudora.com/download/eudora/windows/6.1.2/RelNotes.txthttp://www.osvdb.org/6009http://www.securityfocus.com/bid/10305