CVE-2019-25646 - Tabs Mail Carrier 2.5.1 Buffer Overflow via MAIL FROM

Back Back to CVE browser

CRITICAL

Tabs Mail Carrier 2.5.1 Buffer Overflow via MAIL FROM

Published Mar 24, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.91%

Description

Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sending a crafted MAIL FROM parameter. Attackers can connect to the SMTP service on port 25 and send a malicious MAIL FROM command with an oversized buffer to overwrite the EIP register and execute a bind shell payload.

Affected products

Vendor Tabs Product Mail Carrier Default
n/a
- Version
  2.5.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Tabs

Mail Carrier

n/a

Version	Status	Constraints
2.5.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20031
Advisory
https://www.exploit-db.com/exploits/46547
exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/tabs-mail-carrier-buffer-overflow-via-mail-from
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20031		Advisory
https://www.exploit-db.com/exploits/46547		exploitThird Party AdvisoryVDB Entry
https://www.vulncheck.com/advisories/tabs-mail-carrier-buffer-overflow-via-mail-from		third-party-advisoryThird Party Advisory