VULNERABILITY INTELLIGENCE
CVE-2000-0342
CVSS score7.5 HIGH
EPSS probability3.45%
CISA KEVNot currently listed
Published2000-04-28
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
Eudora 4.x allows remote attackers to bypass the user warning for executable attachments such as .exe, .com, and .bat by using a .lnk file that refers to the attachment, aka "Stealth Attachment."
Weakness classification
- CWE-59: Improper Link Resolution Before File Access ('Link Following')
Primary references
- cve@mitre.org — Not Applicable, Vendor Advisory
- cve@mitre.org — Exploit
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry