Tabslab vulnerabilities
Published CVEs affecting Tabslab products: 2 record(s), with severity, exploitation and fixes.
CVE-2019-25646
Critical · 9.8
CWE-787 Mar 24, 2026
Tabs Mail Carrier 2.5.1 Buffer Overflow via MAIL FROM
Tabs Mail Carrier 2.5.1 contains a buffer overflow vulnerability in the MAIL FROM SMTP command that allows remote attackers to execute arbitrary code by sending a crafted MAIL FROM parameter. Attackers can connect to the SMTP service on port 25 and send a malicious MAIL FROM command with an oversized buffer to overwrite the EIP register and execute a bind shell payload.
CVE-2019-25364
Critical · 9.8
CWE-121 Feb 18, 2026
Win10 MailCarrier 2.51 - 'POP3 User' Remote Buffer Overflow
MailCarrier 2.51 contains a buffer overflow vulnerability in the POP3 USER command that allows remote attackers to execute arbitrary code. Attackers can send a crafted oversized buffer to the POP3 service, overwriting memory and potentially gaining remote system access.