by Kastro
Paper/Archive/CVE-2010-4344

CVE-2010-4344

Exim Exim — Exim Heap-Based Buffer Overflow Vulnerability

KEV · due 15 AprEPSS 72%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
99
CVSS 9.8 (ADP)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 99.4.994 × 2019.9Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

advisorylists.opensuse.org/opensuse-security-announce/2010-12/msg00003.htmlrefexim.org/lurker/message/20101207.215955.bb32d4f2.en.htmlrefbugs.exim.org/show_bug.cgi?id=787refsecuritytracker.com/id?1024858advisoryredhat.com/support/errata/RHSA-2010-0970.htmlrefvupen.com/english/advisories/2010/3186refsecurityfocus.com/bid/45308refmetasploit.com/modules/exploit/unix/smtp/exim4_string_formatrefatmail.com/blog/2010/atmail-6204-now-availablewriteupsecunia.com/advisories/42576writeupsecunia.com/advisories/42587refbugzilla.redhat.com/show_bug.cgi?id=661756reflists.exim.org/lurker/message/20101210.164935.385e04d0.en.htmlwriteupsecunia.com/advisories/40019refvupen.com/english/advisories/2010/3172writeupkb.cert.org/vuls/id/682457refvupen.com/english/advisories/2010/3181writeupsecunia.com/advisories/42586refvupen.com/english/advisories/2010/3317advisoryubuntu.com/usn/USN-1032-1refcpanel.net/2010/12/exim-remote-memory-corruption-vulnerability-notification-cve-2010-4344.htmlrefosvdb.org/69685refsecurityfocus.com/archive/1/515172/100/0/threadedreftheregister.co.uk/2010/12/11/exim_code_execution_perilrefvupen.com/english/advisories/2010/3246
refftp://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.70
refvupen.com/english/advisories/2010/3204refgit.exim.org/exim.git/commit/24c929a27415c7cfc7126c47e4cad39acf3efa6badvisorydebian.org/security/2010/dsa-2131refvupen.com/english/advisories/2010/3171writeupsecunia.com/advisories/42589refopenwall.com/lists/oss-security/2010/12/10/1refopenwall.com/lists/oss-security/2021/05/04/7refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-4344kevcisa.gov/known-exploited-vulnerabilities-catalog