Re: Microsoft Security Bulletin (MS98-008)

[brett () LARIAT ORG (Brett Glass)]

InfoWorld, at http://www.infoworld.com/cgi-bin/displayStory.pl?980728.ehbugs.htm,
claims that the MIME filename overflow exploit affects Eudora. Is this correct?
This is the first I've heard of that mailer being vulnerable.

After seeing the QPopper holes and at least two bugs in Eudora that appear to be due to
buffer overruns, I'm willing to believe that Qualcomm has a general problem with
code quality, especially vis-a-vis safe string coding. But has Qualcomm stated
"yea" or "nay" on this? Or has anyone actually crashed Eudora via this bug?

--Brett