CVE-2002-1770: Qualcomm Eudora

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media Player file containing JavaScript code, which is launched and executed in the My Computer zone by Internet Explorer.

Affected products

• Qualcomm Eudora: version 5.1 only

Published 2002-12-31. Last modified 2026-06-16.