CVE-2018-25223

Critical CVSS: 9.3

Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed attempts potentially causing denial of service.

Vendor

Ftnapps

Product

Crashmail Ii

CWE

CWE-787

Yayın Tarihi

2026-03-28 12:16:03

Güncelleme

2026-04-02 19:10:16

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-787 Crashmail Ii CRITICAL Ftnapps 2026

Referanslar

http://exploitpack.com http://ftnapps.sourceforge.net/crashmail.html https://www.exploit-db.com/exploits/44331 https://www.vulncheck.com/advisories/crashmail-stack-based-buffer-overflow-remote-code-execution