CVE-2010-4344

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

Date published : 2010-12-14

http://www.securityfocus.com/bid/45308

http://www.securityfocus.com/archive/1/515172/100/0/threaded