Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 28, 2026 · NIST NVD

   Detected

   Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed attempts potentially causing denial of service.

2. Oct 7, 2026 · NIST NVD

   Updated

   Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed attempts potentially causing denial of service.

Affected

• cpe ftnapps/crashmail iiversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2018-25223

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2018-25223

  Crashmail 1.6 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending malicious input to the application. Attackers can craft payloads with ROP chains to achieve code execution in the application context, with failed

  nvd.nist.gov

References

• Not Applicable · exploitpack.com
• Product · ftnapps.sourceforge.net
• Exploit · exploit-db.com
• Third Party Advisory · vulncheck.com