CVE-2010-4344
CISA KEV
ACT NOW
Priority: 0.00
BB Relevance:
0/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.
CISA Known Exploited Vulnerability
Vendor / Product
Exim — Exim
Date Added
2022-03-25
Remediation Due
2022-04-15
https://nvd.nist.gov/vuln/detail/CVE-2010-4344
Weakness Classification (1)
Affected Software (8)
| Vendor | Product | Version |
|---|---|---|
| canonical | ubuntu_linux | 6.06 |
| canonical | ubuntu_linux | 8.04 |
| canonical | ubuntu_linux | 9.10 |
| debian | debian_linux | 5.0 |
| exim | exim | < 4.70 |
| opensuse | opensuse | 11.1 |
| opensuse | opensuse | 11.2 |
| opensuse | opensuse | 11.3 |
References & Advisories (34)
US Government Resource
Third Party Advisory
US Government Resource
Third Party Advisory
Third Party Advisory
Press/Media Coverage
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Third Party Advisory
Mailing List
Patch
Mailing List
Patch
Issue Tracking
Patch
Exploit
Mailing List
Exploit
Mailing List
Exploit
Issue Tracking
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Broken Link
Vendor Advisory
Showing 25 of 34 references