CVE-2006-0637: Qualcomm Eudora Worldmail

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument, as demonstrated by Worldmail.pl. NOTE: this is a different vector and a different manipulation than CVE-2005-4267, so it might be a different vulnerability than CVE-2005-4267.

Affected products

• Qualcomm Eudora Worldmail: version 3.0 only

Published 2006-02-10. Last modified 2026-06-16.