Approved changes feed: RSS · Atom

cpe:2.3:a:qualcomm:qpopper:4.0.4:*:*:*:*:*:*:*

part: a version: 4.0.4 update: *

VendorQualcomm (4194a0de-9926-556d-a143-7609c2315dd6)
ProductQpopper (8eb0dd16-5683-55bb-879d-0d0abd138bdf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-1452 vulnerable 2026-06-08 04:47:47.592574 Details available
Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program.
Published: 2007-10-23T01:00:00.000Z
Updated: 2024-08-08T02:28:03.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0143 vulnerable 2026-06-08 04:47:20.795960 Details available
The pop_msg function in qpopper 4.0.x before 4.0.5fc2 does not null terminate a message buffer after a call to Qvsnprintf, which could allow authenticated users to execute arbitrary code via a buffer overflow in a mdef command with a long macro name.
Published: 2004-09-01T04:00:00.000Z
Updated: 2024-08-08T01:43:36.007Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0889 vulnerable 2026-06-08 04:46:22.462876 Details available
Buffer overflow in Qpopper (popper) 4.0.4 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a long bulldir argument in the user's .qpopper-options configuration file.
Published: 2003-04-02T05:00:00.000Z
Updated: 2024-08-08T03:03:49.369Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.