What’s Vulnerable › Vulnerabilities

CVE-2002-1210

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-11-29 · updated 2026-06-16

Description

Qualcomm Eudora 5.1.1, 5.2, and possibly other versions stores email attachments in a predictable location, which allows remote attackers to read arbitrary files via a link that loads an attachment with malicious script into a frame, which then executes the script in the local browser context.

Affected products

• Qualcomm Eudora: 5.1.1, 5.2

References

• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html
• http://www.idefense.com/advisory/11.19.02b.txt
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0079.html
• http://www.idefense.com/advisory/11.19.02b.txt

Get alerted when CVE-2002-1210 or the next vulnerability affects your stack