crashmail_ii vulnerabilities

CVEs whose affected-version data names the crashmail_ii package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2018-25223Critical· 9.8PoC

7mo ago

Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application

Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code executi…

▾ Abyssalftnapps · crashmail_iiEPSS 0.94%via NVD