Back

CVE-2006-0637

Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute arbitrary code via an IMAP APPEND command with a long message literal argument, as demonstrated by Worldmail.pl. NOTE: this is a different vector and a different manipulation than CVE-2005-4267, so it might be a different vulnerability than CVE-2005-4267.

Published: Feb 10, 2006 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
qualcomm eudora_worldmail 3.0

GitHub Security Advisory GHSA-p489-2qgm-7765

Buffer overflow in cram.dll in QUALCOMM Eudora WorldMail 3.0 allows remote attackers to execute...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 2.14%

Top 19% most likely to be exploited

Threat Score 30.6 / 100

Data Sources

NVD EPSS GitHub