CVE-2003-1452: Qualcomm Qpopper

Low severity, CVSS 3.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.

Affected products

• Qualcomm Qpopper: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2003-12-31. Last modified 2026-06-16.