Skip to content
OpenAdvisories
Critical · 9.8 CVE-2019-25364 EUVD-2019-19700GHSA-jm9g-c5gq-m5v9

Win10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow

Published Feb 18, 2026 · Updated Jul 28, 2026 · Assigned by VulnCheck

Description

MailCarrier 2.51 contains a buffer overflow vulnerability in the POP3 USER command that allows remote attackers to execute arbitrary code. Attackers can send a crafted oversized buffer to the POP3 service, overwriting memory and potentially gaining remote system access.

Affected products

VendorProductAffectedFixed
TABS Laboratories Win10 MailCarrier 2.51 —

References