CVE-2018-25223
🔴 Łataj teraz
Przepełnienie bufora w Crashmail 1.6 umożliwia zdalne wykonanie kodu przez atakujących.
CVSS
9.8
EPSS
0.9%
Exploit
poc
Vendor
ftnapps
Opis źródłowy (NVD)
Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed attempts potentially causing denial of service.
buffer-overflow dos exploit
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 9.8 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 0.9% |
| Opublikowano (NVD) | 2026-03-28 12:16:03 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-07 08:10:00 UTC |
Referencje
- http://exploitpack.com ([email protected]) [Not Applicable]
- http://ftnapps.sourceforge.net/crashmail.html ([email protected]) [Product]
- https://www.exploit-db.com/exploits/44331 ([email protected]) [Exploit, VDB Entry]
- https://www.vulncheck.com/advisories/crashmail-stack-based-buffer-overflow-remote-code-execution ([email protected]) [Third Party Advisory]