Vulnerabilities > Qualcomm > Qpopper > 4.0.3

DATE CVE VULNERABILITY TITLE RISK
2003-12-31 CVE-2003-1452 Configuration vulnerability in Qualcomm Qpopper
Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.
local
low complexity
qualcomm CWE-16
3.6
2003-03-18 CVE-2003-0143 Remote Memory Corruption vulnerability in Qpopper
The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.
network
low complexity
qualcomm
critical
10.0
2002-10-04 CVE-2002-0889 Buffer Overflow vulnerability in Qualcomm QPopper Bulletin Name
Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.
local
low complexity
qualcomm
4.6
2002-08-12 CVE-2002-0454 Remote Denial of Service vulnerability in Qualcomm QPopper
Qpopper (aka in.qpopper or popper) 4.0.3 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a very large string, which causes an infinite loop.
network
low complexity
qualcomm
5.0