CVE-2010-4344

If attackers can pass a negative size to the allocator, they can overwrite Exim's config with "${run{...}}" strings and execute arbitrary commands. "The first recorded use of expand_string() in an Exim exploit is CVE-2010-4344, an important part of (boomer) Internet folklore"

If attackers can pass a negative size to the allocator, they can overwrite Exim's config with "${run{...}}" strings and execute arbitrary commands. "The first recorded use of expand_string() in an Exim exploit is CVE-2010-4344, an important part of (boomer) Internet folklore"

CVE-2010-4344 Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conj... https://t.co/9znIpXaYUT?amp=1

CVE-2010-4344 Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conj... https://t.co/9znIpXaYUT?amp=1