CVE-2000-0342

HighCVSS 7.5

Published: 28/04/2000(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.45%

87th percentile - higher than 87% of all known CVEs

Summary

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka 'Stealth Attachment.'

Risk Assessment

Attackers can exploit this vulnerability to deliver malware without triggering a warning, increasing the risk of user systems being compromised.

Recommendation

It is recommended to update Eudora to the latest version and implement additional security measures to minimize the risk associated with opening suspicious attachments.

Other vulnerabilities in Eudora 4.x

CVE-1999-0427High
Eudora 4.1 allows remote attackers to perform a denial of service by sending attachments with long file names.

Original NVD description (English source)

Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."