CVE-2010-4344

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 14, 2010
Updated: Dec 19, 2024
CWE ID 787

Summary

CVE-2010-4344 is a heap-based buffer overflow vulnerability affecting Exim version before 4.70. This issue arises in the string_vformat function of the string.c module. An attacker can exploit this flaw by sending an SMTP session with two MAIL commands and a large message containing maliciously crafted headers. The vulnerability results in improper rejection logging, enabling the attacker to execute arbitrary code.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • University Of Cambridge Exim
  • Ubuntu Linux
  • Open SUSE
  • Debian

Affected Vendors

  • Debian
  • Opensuse
  • Canonical System
  • Export-Import Bank of the United States

Advisories, Assessments, and Mitigations