PT-2010-5427 · Exim+1 · Exim+1
Josh Bressers
·
Published
2010-12-10
·
Updated
2025-03-13
·
CVE-2010-4344
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Exim versions prior to 4.70
Description
The issue is related to a heap-based buffer overflow in the
string vformat function, allowing remote attackers to execute arbitrary code via an SMTP session. This can be achieved by including two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging. The estimated number of potentially affected devices worldwide is not specified.Recommendations
For Exim versions prior to 4.70, update to version 4.70 or later to resolve the issue. As a temporary workaround, consider restricting access to the
string vformat function in the string.c file until a patch is available. Avoid using crafted headers in large messages via SMTP sessions to minimize the risk of exploitation.Exploit
Fix
RCE
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Exim
Red Hat