CVE-2025-42599 PUBLISHED

Assigner: jpcert
Reserved: 16.04.2025 Published: 18.04.2025 Updated: 18.04.2025

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition.

Metrics

CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Product Status

Vendor QUALITIA CO., LTD.
Product Active! mail 6
Versions
  • Version BuildInfo: 6.60.05008561 and earlier is affected

References

Problem Types