Qualcomm Eudora Worldmail vulnerabilities

4 CVEs affecting Qualcomm Eudora Worldmail, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-10031, published 2015-01-13.

More from Qualcomm.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-10031, published 2015-01-13. High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days. Buffer overflow in the IMAPd service in Qualcomm Eudora WorldMail 9.0.333.0 allows remote attackers to execute arbitrary code via a long string in a UID command.
• CVE-2006-0637, published 2006-02-10. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument, as demonstrated by…
• CVE-2006-6024, published 2006-11-21. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Multiple buffer overflows in Eudora Worldmail, possibly Worldmail 3 version 6.1.22.0, have unknown impact and attack vectors, as demonstrated by the (1) "Eudora WorldMail stack overflow" and (2)…
• CVE-2006-6025, published 2006-11-21. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. QUALCOMM Eudora WorldMail 4.0 allows remote attackers to cause a denial of service, as demonstrated by a certain module in VulnDisco Pack. NOTE: The provenance of this information is unknown; the…