PT-2025-17252 · Unknown · Active! Mail

Published 2025-04-18 · Updated 2025-10-24 · CVE-2025-42599

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Active! mail versions 6.60.05008561 and earlier

Description The issue is a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition. The vulnerability has been exploited in real-world attacks, particularly in Japan, with over 1,300 services potentially affected.

Recommendations For Active! mail versions 6.60.05008561 and earlier, update to a newer version to mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

DoS

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-13113

CVE-2025-42599

Affected Products

Active! Mail

References · 51

• https://osv.dev/vulnerability/CVE-2025-42599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-42599 · Security Note
• https://bdu.fstec.ru/vul/2025-13113 · Security Note
• https://twitter.com/CveFindCom/status/1914583308618420367 · Twitter Post
• https://twitter.com/0dayPublishing/status/1980713817270014055 · Twitter Post
• https://twitter.com/freedomhack101/status/1915379531679981816 · Twitter Post
• https://t.me/purp_sec/544 · Telegram Post
• https://twitter.com/CVEnew/status/1913091261466050911 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1k3shfh/top_10_trending_cves_20042025 · Reddit Post
• https://qualitia.com/jp/news/2025/04/18_1030.html · Security Note, Vendor Advisory
• https://twitter.com/fernandokarl/status/1914814504837222824 · Twitter Post
• https://twitter.com/transilienceai/status/1917193369211613416 · Twitter Post
• https://t.me/cvedetector/23303 · Telegram Post
• https://reddit.com/r/CVEWatch/comments/1k584yg/top_10_trending_cves_22042025 · Reddit Post
• https://twitter.com/syedaquib77/status/1914413884875923617 · Twitter Post