CVE-1999-1448
MediumExploitation Probability (EPSS)
Elevated risk52th percentile - higher than 52% of all known CVEs
Summary
Eudora and Eudora Light before version 3.05 allow remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as dates before 1970 or dates that are 100 years after the current date.
Risk Assessment
Attackers can exploit this vulnerability to disrupt the email application, leading to loss of access to the user's email messages.
Recommendation
It is recommended to update Eudora and Eudora Light to version 3.05 or later to mitigate this vulnerability.
Original NVD description (English source)
Eudora and Eudora Light before 3.05 allows remote attackers to cause a crash and corrupt the user's mailbox via an e-mail message with certain dates, such as (1) dates before 1970, which cause a Divide By Zero error, or (2) dates that are 100 years after the current date, which causes a segmentation fault.