Intrusion PreventionExim4.string_format.Function.Heap.Overflow
Description
This indicates a possible attack against a heap overflow vulnerability in Exim.
The vulnerability is a result of the string_format function's failure to properly sanitize user-supplied input.
Affected Products
Exim prior to and including version 4.69
Impact
System compromise
Recommended Actions
Refer to the vendor's link:
http://bugs.exim.org/show_bug.cgi?id=787
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 25237 |
| Created | May 20, 2011 |
| Updated | Mar 27, 2023 |
| Risk |
|
| CVE ID | CVE-2010-4345 CVE-2010-4344 |
| Known Exploited | Yes |
| Exploit Prediction Score | 93.07% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |