DescriptionHeap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.
Overall state of this security issue: Resolved
This issue is currently rated as having critical severity.
|National Vulnerability Database|
SUSE Security Advisories:
- SUSE-SA:2010:059, published Mon, 13 Dec 2010 09:00:00 +0000
- openSUSE-SU-2010:1052-1, published Mon, 13 Dec 2010 12:08:12 +0100 (CET)
List of released packages
|Product(s)||Fixed package version(s)||References|
|openSUSE Tumbleweed|| ||Patchnames: |
openSUSE Tumbleweed GA exim-4.86.2-2.2
SUSE Timeline for this CVECVE page created: Fri Jun 28 07:42:36 2013
CVE page last modified: Mon Feb 13 11:31:23 2023