CVE-2013-10064CWE-121

ActFax 5.01 RAW Server Buffer Overflow

Critical · published August 5, 2025

CVSS v4.0
9.3
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fails to safely process user-supplied data in @F506 fax header fields due to insecure usage of strcpy. Remote attackers can exploit this vulnerability by sending specially crafted @F506 fields, potentially leading to arbitrary code execution. Successful exploitation requires network access to TCP port 4559 and does not require authentication.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.01507 · 74.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-08-05T19:58Z
EPSS history
Timeline
  • 05 AUG 19:58Z
    ActFax 5.01 RAW Server Buffer Overflow
    cvelistv5