CVE-2024-25501

Name of the Vulnerable Software and Affected Versions WinMail versions 5.1 and earlier WinMail version 7.1

Description An issue allows a remote attacker to execute arbitrary code via a crafted script to the email parameter.

Recommendations For WinMail versions 5.1 and earlier, update to a version later than 5.1 to resolve the issue. For WinMail version 7.1, update to a version later than 7.1 to resolve the issue. As a temporary workaround, consider restricting access to the email parameter to minimize the risk of exploitation.