All intelligence
// vulnerability record
cached · NVD via COSMOS syncCVE-2010-4344
NONEKEVpublish date unavailable
CVSS / 10
// description
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.
// required action (CISA KEV)
Apply updates per vendor instructions.
added 2022-03-25 00:00 UTC