critical9.8
CVE-2019-25364
MailCarrier 2.51 contains a buffer overflow vulnerability in the POP3 USER command that allows remote attackers to execute arbitrary code.
Impact
MailCarrier 2.51 contains a buffer overflow vulnerability in the POP3 USER command that allows remote attackers to execute arbitrary code. Attackers can send a crafted oversized buffer to the POP3 service, overwriting memory and potentially gaining remote system access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tabslab | Mailcarrier | Version 2.51 |