Qualcomm Eudora 5.0.2 - 'Use Microsoft Viewer' Code Execution

Author: http-equiv
type: remote
platform: windows
port: 
date_added: 2001-03-18 
date_updated: 2012-08-20 
verified: 1 
codes: CVE-2001-0365;OSVDB-14801 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/2490/info

Eudora uses Internet Explorer to assist in the viewing of html messages if the 'Use Microsoft Viewer' option is enabled. Eudora also has a 'allow executables in HTML content' option, which the documentation recommends be disabled for securithy reasons. It is possible for an attacker to excecute arbitrary code on a remote system even if 'allow executables in HTML content' is disabled, if the 'Use Microsoft viewer' option is enabled.

http://www.malware.com/you!DORA.txt