Home / Vulnerability Intelligence / CVE-2019-25646

CVE-2019-25646 - Vulnerability Analysis

CriticalCVSS: 9.8

Last Updated: March 24, 2026

Tabs Mail Carrier - Buffer Overflow

Published: March 24, 2026Updated: March 24, 2026Remote Exploitable

Overview

Tabs Mail Carrier 2.5.1 contains a buffer overflow caused by an oversized MAIL FROM SMTP command parameter, letting remote attackers execute arbitrary code via crafted SMTP requests, exploit requires network access to SMTP port 25.

Severity & Score

Severity: Critical

CVSS Score: 9.8

Impact

Remote attackers can execute arbitrary code, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of Tabs Mail Carrier.

References

https://www.exploit-db.com/exploits/46547
https://www.vulncheck.com/advisories/tabs-mail-carrier-buffer-overflow-via-mail-from

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2019-25646
Severity: Critical
CVSS Score: 9.8
Type: buffer_overflow
Status: new

CWE

CWE-787

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H