CVE-2013-10064

CVE-2013-10064 describes a critical stack-based buffer overflow vulnerability in ActFax Server version 5.01, specifically within its RAW protocol interface. This flaw allows unauthenticated remote attackers to achieve arbitrary code execution by sending specially crafted data to TCP port 4559, leveraging insecure strcpy usage in @F506 fax header fields. With a CVSS score of 9.3 (CRITICAL) and an EPSS score indicating high exploitability, this vulnerability poses a significant risk due to its network-accessible, low-complexity attack vector and high impact on confidentiality, integrity, and availability. While not listed on the KEV catalog, a Metasploit module exists, and the vulnerability has garnered substantial community discussion, suggesting active interest and potential for exploitation.