News Eudora Suffers Security Scare

Use Eudora? Whaddaya mean what's Eudora? It's a popular email client. At least that's what this PCWorld story says. It also says there's a patch for it:

Qualcomm has patched serious security vulnerabilities in its Eudora e-mail client that could allow an attacker to take over a Windows system via a specially crafted message.

The bugs affect version 6.2.0 of the application, released in November, and earlier versions. Qualcomm has released an update, version 6.2.1, that fixes the bug.

John Heasman of NGS Software discovered the flaws, which affect only the Windows version. They allow an attacker to execute malicious code on a user's system--with the privileges of the user running Eudora--when a malicious e-mail is previewed or opened, or when a malicious stationery or mailbox file is opened.

NGS Software said it wouldn't release details of the flaws until May 2, to give users time to patch the application.

More here