Eudora is a legacy email and messaging platform whose vulnerability profile centers on its mail server and management components, representing a narrowly scoped but historically significant email infrastructure product. The disclosed vulnerabilities cluster around input-validation weaknesses characteristic of mail-handling systems, alongside instances where vulnerability details were not fully specified in public disclosures. Current severity, exploitation status, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Eudora over time
Signals from CVEs in this vendor scope (4 CVEs).
4 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-6336HIGH Heap-based buffer overflow in the Mail Management Server (MAILMA.exe) in Eudora WorldMail 3.1.x allows remote attackers to execute arbitrary code via a crafted request containing s | Dec 31, 2006 | 10.0 | 27 | NO | NO |
CVE-2004-2649MEDIUM Eudora 6.1.0.6 allows remote attackers to obfuscate URLs displayed in the status bar by inserting a large number of characters (e.g. spaces coded as " ") in the middle of the UR | Dec 31, 2004 | 5.8 | 25 | NO | YES |
CVE-1999-1113MEDIUM Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106. | Apr 14, 1998 | 5.0 | 24 | NO | YES |
CVE-2006-0141MEDIUM Qualcomm Eudora Internet Mail Server (EIMS) before 3.2.8 allows remote attackers to cause a denial of service (crash) via (1) malformed NTLM authentication requests, or a malformed | Jan 9, 2006 | 5.0 | 16 | NO | NO |
Signals from CVEs in this vendor scope (4 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Eudora.
Media articles that mention a CVE ID that affects a product developed by Eudora — matched by CVE ID, not by vendor name.