Active! mail vulnerable to stack-based buffer overflow

Overview Active! mail provided by QUALITIA CO., LTD. contains a stack-based buffer overflow vulnerability CWE-121. The developer states that attacks exploiting the vulnerability has been observed. QUALITIA CO., LTD. reported this vulnerability to JPCERT/CC to notify users of its solution through...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition...

CVE-2025-42599

Qualitia Active! Mail is affected by a stack-based buffer overflow in Active! Mail 6 (BuildInfo: 6.60.05008561 and earlier). A remote unauthenticated attacker can send a crafted request to potentially execute arbitrary code or cause a DoS. Several sources corroborate this vulnerability, including...

CVE-2025-42599: Stack-based Buffer Overflow

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition...

QUALITIA Active! mail 安全漏洞

QUALITIA Active! mail is an e-mail software from QUALITIA Corporation. A security vulnerability exists in QUALITIA Active! mail version 6.60.05008561 and prior versions, which originates from a stack buffer overflow and could lead to arbitrary code execution or denial of service...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition. Recent assessments:...

PT-2025-17252

Name of the Vulnerable Software and Affected Versions Active! mail versions 6.60.05008561 and earlier Description The issue is a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code...

VulnCheck KEV: CVE-2025-42599

Qualitia Active! Mail contains a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to execute arbitrary or trigger a denial-of-service via a specially crafted request...

CVE-2025-29459

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation...

CVE-2025-29459

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation...

CVE-2025-29451

An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component...

CVE-2025-29451

An issue in Seo Panel version 4.11.0 allows a remote attacker to obtain sensitive information through the Mail Setting component. The vulnerability is characterized as a Server-Side Request Forgery (SSRF) (CWE-918) caused by mishandling of the email settings component. Exploitation details and pr...

ROS-20250417-07

Exim mail server vulnerability is related to memory usage after memory is freed. Exploitation of the vulnerability could allow an attacker to escalate his privileges...

CVE-2025-29459

An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation...

CVE-2025-29451

An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component...

CVE-2025-29451

An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Mail Setting component...

CVE-2025-29459

A security vulnerability exists in MyBB version 1.8.38 , a web-based forum software. The flaw stems from insufficient testing of requests on the server side within the Mail function , which could allow a remote attacker to gain unauthorized access to protected information . Notably, the supplier ...