CVE-2010-4344
Exim Heap-Based Buffer Overflow Vulnerability
CVSS
—
No CVSS
EPSS
71.9%
p99
KEV
YES
Mar 25, 2022
Exploit Today
80
0-100
Published: — · Last modified: —
71.8%EPSS · 30 days71.9%
2026-06-302026-07-16
Product
Exim / Exim
Vulnerability
Exim Heap-Based Buffer Overflow Vulnerability
Added to KEV
Mar 25, 2022
Remediate by
Apr 15, 2022
Known ransomware use
No
Summary description
Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2010-4344