← All advisories

High severity8.8NVD Advisory· Published Mar 9, 2024· Updated Jun 17, 2026

CVE-2024-25501

CVE-2024-25501

Description

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Winmail/Winmail4 versions
cpe:2.3:a:winmail:winmail:*:*:*:*:-:*:*:*+ 3 more
- cpe:2.3:a:winmail:winmail:*:*:*:*:-:*:*:*range: <=7.1
- cpe:2.3:a:winmail:winmail:*:*:*:*:pro:*:*:*range: <=5.1
- (no CPE)
- (no CPE)range: <=7.1, <=5.1

Patches

Vulnerability mechanics

References

1

gist.github.com/Drun1baby/8270239bed2952dbd99cc8d4262728e8nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.