Remote Code Execution (RCE)

exim is vulnerable to Remote Code Execution (RCE). The vulnerability arises from the absence of proper validation for user-supplied data in the SMTP service. This could result in a buffer overflow, enabling an attacker to inject and execute malicious code within the service account’s context.