CVE-2019-25364 | THREATINT

Description

MailCarrier 2.51 contains a buffer overflow vulnerability in the POP3 USER command that allows remote attackers to execute arbitrary code. Attackers can send a crafted oversized buffer to the POP3 service, overwriting memory and potentially gaining remote system access.

PUBLISHED Reserved 2026-02-13 | Published 2026-02-18 | Updated 2026-02-19 | Assigner VulnCheck

CRITICAL: 9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

Stack-based Buffer Overflow

Product status

2.51

affected

Credits

Lance Biggerstaff, Dino Covotsos - Telspace Systems finder

References

www.exploit-db.com/exploits/47554 (ExploitDB-47554) exploit

www.tabslab.com/ (Vendor Homepage) product

www.vulncheck.com/...carrier-pop-user-remote-buffer-overflow (VulnCheck Advisory: Win10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow) third-party-advisory

cve.org (CVE-2019-25364)

nvd.nist.gov (CVE-2019-25364)

Download JSON