CVE-2025-42599KEV · OVERDUECWE-121

Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

Critical · published April 18, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 88.6th percentile for exploit probability.

523
days past CISA
deadline
CVSS v3.1
9.8
EPSS
3%
Percentile
88.6
In the wild
Confirmed
What it is

🚨 A specially crafted request could spell disaster for your system! 🎉 Active! mail 6 (up to version 6.60.05008561) has a stack-based buffer overflow that lets attackers execute arbitrary code remotely. Think of it like a delivery driver leaving a package that triggers a chain reaction — one wrong button gets pressed, and suddenly, the whole system goes haywire, just like an assembly line that's now producing faulty products. An attacker can use this vulnerability to take control of your system, potentially executing malicious code or causing a denial-of-service (DoS) condition. This means they could disrupt your email services or even take full control of your server, leading to devastating consequences for your operations.

Put simply

Think of it like a delivery driver leaving a package that triggers a chain reaction — one wrong button gets pressed, and suddenly, the whole system goes haywire, just like an assembly line that's now producing faulty products. This stack-based buffer overflow in Active! mail allows remote attackers to send a crafted request, which can overwrite the stack memory, leading to arbitrary code execution when the server processes this input.

What to do

An attacker can use this vulnerability to take control of your system, potentially executing malicious code or causing a denial-of-service (DoS) condition. This means they could disrupt your email services or even take full control of your server, leading to devastating consequences for your operations. Immediate patching is crucial! Update Active! mail to the latest version to protect against this vulnerability, and ensure that your server is configured with security best practices to minimize the risk of exploitation. You've got this! By taking these steps, you’ll secure your system and protect your users! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03355 · 88.6th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2025-04-18T08:15Z
KEV added
2025-04-28 · due 2025-05-19
Affected products (1)
ProductVersionsFixed in
qualitia/active\!_mail< 6.60.050085626.60.05008562
References (3)
EPSS history
Timeline
  • 28 APR 00:00Z
    Added to CISA KEV — remediate by May 19
    kev
  • 18 APR 03:52Z
    Active!
    cvelistv5