[A message from Qualcomm to all registered users of Eudora Pro v. 4.x - Geoff]
Hello, you are receiving this email message because you are a registered
user of Eudora Pro Email v 4.0 for the Windows® OS or Eudora Pro CommCenter
v 4.0 for the Windows® OS. If you previously asked to be removed from the
Eudora mailing list, we have honored your request. However we feel this
issue is important enough that all users of Eudora Pro email 4.0 should be
notified.
QUALCOMM recently identified that a potential security risk existed in
Eudora Pro Email 4.0 for Windows and Eudora Pro Email 4.0.1 for Windows.
QUALCOMM took immediate steps to fix the problem, and after a thorough
review is satisfied that the problem no longer exists.
QUALCOMM has taken reasonable steps to make sure users are protected from
this.
First, users can immediately solve this problem by disabling the Microsoft
viewer.
1) In Eudora, go to the Tools menu and choose “Options”.
2) On the left hand side of the options window, select “Viewing Mail”
3) On the right hand side of the options windows, make sure the box next to
“Use Micorsoft’s Viewer” is UNCHECKED.
4) Click on “OK” on the bottom of the window.
Second, you can go to QUALCOMM's web site at
<http://www.qualcomm.com/eudora/security.html> and download the fix for the
problem, which is the form of a "patch." This is free and currently
available for download.
This security risk involves the ability to include user hostile Java
applets or scripts in an email message. The offending code has the
potential to allow a person to attach to an email message an executable
program, as is possible with any email program, while "hiding" the name of
the attachment as a URL in the email message. A user could then
potentially click on that URL and launch the email attachment. To this date
QUALCOMM has not been notified of anyone affected by this potential
security hole.
QUALCOMM believes this problem does not exist in the latest version of
Eudora Pro Email 4.1 for Windows, which is now available in public beta on
QUALCOMM's web site. QUALCOMM also believes Eudora Light and versions of
Eudora Pro prior to 4.0 are not affected by this problem.
QUALCOMM urges users to always be aware of who is sending them email, as
well as using caution when launching attachments from strangers. If there
are additional questions or concerns, QUALCOMM would be happy to provide
additional information to customers or other email vendors who contact the
company.
DISCLAIMER: All the material presented in this newsletter is accurate as of
August 7th, 1998. Changes in Eudora's policies, products or services after
this date are not reflected in this content.
Copyright (c) 1998 QUALCOMM Incorporated. All rights reserved. QUALCOMM
Incorporated, Eudora Division, 6455 Lusk Blvd., San Diego, CA 92121-2779
USA. QUALCOMM, Eudora, Eudora Pro, and Eudora Light are registered
trademarks and Eudora Planner and Eudora WorldMail are trademarks of
QUALCOMM Incorporated. All other trademarks are the property of their
respective owners. 08/98
# # # Q U A L C O M M # # #
|